C# Corner

ASP.NET Core Security, Part 1

To start my series on ASP.NET Core security, I'll show how to set up authentication to register, log in and log out a user account in an ASP.NET Core MVC application. To get started, open Visual Studio 2017 and create a new ASP.NET Core Web Application as seen in Figure 1.

Create New ASP.NET Core Web App
[Click on image for larger view.] Figure 1. Create New ASP.NET Core Web App

Next click on the Change Authentication button on the next dialog as seen in Figure 2.

Change Authentication Dialog
[Click on image for larger view.] Figure 2. Change Authentication Dialog

Then change the authentication type to "Individual User Accounts" as seen in Figure 3.

Individual User Accounts Setting
[Click on image for larger view.] Figure 3. Individual User Accounts Setting

Next click the OK button to create the new ASP.NET Core Web Application as seen in Figure 4.

Create App with Authentication Set
[Click on image for larger view.] Figure 4. Create App with Authentication Set

Next we are going to create the database for our application. Go to Tools |NuGet Package Manager | Package Manager Console as seen in Figure 5.

Open Package Manger Console
[Click on image for larger view.] Figure 5. Open Package Manger Console

Then run the "Update-Database" command in the console.

Your app is now configured to allow a user to register a user, log in an existing user and log out an existing user. To test this functionality, first register a new user by clicking on the Register link as seen in Figure 6.

Finished App
[Click on image for larger view.] Figure 6. Finished App

Once you click on the Register link you should see the User Registration page as seen in Figure 7.

Register User
[Click on image for larger view.] Figure 7. Register User

After you register a user you'll see that you're automatically logged in as seen in Figure 8.

Logged In!
[Click on image for larger view.] Figure 8. Logged In!

Now you can test out logging out a user by clicking on the Logout link in Figure 8. Lastly, test out the Login functionality by clicking on the Login link from Figure 7. You should now see the Login form as seen in Figure 9.

Login an Existing User
[Click on image for larger view.] Figure 9. Log in an Existing User

In this intro to the ASP.NET Core security series, I've shown you how easy it is to use the built-in authentication provider in ASP.NET Core. Stay tuned for the next installment where I'll show you how to put pages behind log in and create user roles, and use existing roles to restrict access to pages.

About the Author

Eric Vogel is a Senior Software Developer for Red Cedar Solutions Group in Okemos, Michigan. He is the president of the Greater Lansing User Group for .NET. Eric enjoys learning about software architecture and craftsmanship, and is always looking for ways to create more robust and testable applications. Contact him at [email protected].

comments powered by Disqus

Featured

  • Cloud-Focused .NET Aspire 9.1 Released

    Along with .NET 10 Preview 1, Microsoft released.NET Aspire 9.1, the latest update to its opinionated, cloud-ready stack for building resilient, observable, and configurable cloud-native applications with .NET.

  • Microsoft Ships First .NET 10 Preview

    Microsoft shipped .NET 10 Preview 1, introducing a raft of improvements and fixes across performance, libraries, and the developer experience.

  • C# Dev Kit Previews .NET Aspire Orchestration

    Microsoft's dev team has been busy updating the C# Dev Kit, a Visual Studio Code extension that enhances the C# development experience by providing tools for managing, debugging, and editing C# projects.

  • Hands On: New VS Code Insiders Build Creates Web Page from Image in Seconds

    New Vision support with GitHub Copilot in the latest Visual Studio Code Insiders build takes a user-supplied mockup image and creates a web page from it in seconds, handling all the HTML and CSS.

  • Naive Bayes Regression Using C#

    Dr. James McCaffrey from Microsoft Research presents a complete end-to-end demonstration of the naive Bayes regression technique, where the goal is to predict a single numeric value. Compared to other machine learning regression techniques, naive Bayes regression is usually less accurate, but is simple, easy to implement and customize, works on both large and small datasets, is highly interpretable, and doesn't require tuning any hyperparameters.

Subscribe on YouTube

Upcoming Training Events