C# Corner

ASP.NET Core Security, Part 1

To start my series on ASP.NET Core security, I'll show how to set up authentication to register, log in and log out a user account in an ASP.NET Core MVC application. To get started, open Visual Studio 2017 and create a new ASP.NET Core Web Application as seen in Figure 1.

Create New ASP.NET Core Web App
[Click on image for larger view.] Figure 1. Create New ASP.NET Core Web App

Next click on the Change Authentication button on the next dialog as seen in Figure 2.

Change Authentication Dialog
[Click on image for larger view.] Figure 2. Change Authentication Dialog

Then change the authentication type to "Individual User Accounts" as seen in Figure 3.

Individual User Accounts Setting
[Click on image for larger view.] Figure 3. Individual User Accounts Setting

Next click the OK button to create the new ASP.NET Core Web Application as seen in Figure 4.

Create App with Authentication Set
[Click on image for larger view.] Figure 4. Create App with Authentication Set

Next we are going to create the database for our application. Go to Tools |NuGet Package Manager | Package Manager Console as seen in Figure 5.

Open Package Manger Console
[Click on image for larger view.] Figure 5. Open Package Manger Console

Then run the "Update-Database" command in the console.

Your app is now configured to allow a user to register a user, log in an existing user and log out an existing user. To test this functionality, first register a new user by clicking on the Register link as seen in Figure 6.

Finished App
[Click on image for larger view.] Figure 6. Finished App

Once you click on the Register link you should see the User Registration page as seen in Figure 7.

Register User
[Click on image for larger view.] Figure 7. Register User

After you register a user you'll see that you're automatically logged in as seen in Figure 8.

Logged In!
[Click on image for larger view.] Figure 8. Logged In!

Now you can test out logging out a user by clicking on the Logout link in Figure 8. Lastly, test out the Login functionality by clicking on the Login link from Figure 7. You should now see the Login form as seen in Figure 9.

Login an Existing User
[Click on image for larger view.] Figure 9. Log in an Existing User

In this intro to the ASP.NET Core security series, I've shown you how easy it is to use the built-in authentication provider in ASP.NET Core. Stay tuned for the next installment where I'll show you how to put pages behind log in and create user roles, and use existing roles to restrict access to pages.

About the Author

Eric Vogel is a Senior Software Developer for Red Cedar Solutions Group in Okemos, Michigan. He is the president of the Greater Lansing User Group for .NET. Eric enjoys learning about software architecture and craftsmanship, and is always looking for ways to create more robust and testable applications. Contact him at [email protected].

comments powered by Disqus

Featured

  • GitHub Copilot for Azure Gets Preview Glitches

    This reporter, recently accepted to preview GitHub Copilot for Azure, has thus far found the tool to be, well, glitchy.

  • New .NET 9 Templates for Blazor Hybrid, .NET MAUI

    Microsoft's fifth preview of .NET 9 nods at AI development while also introducing new templates for some of the more popular project types, including Blazor Hybrid and .NET MAUI.

  • What's Next for ASP.NET Core and Blazor

    Since its inception as an intriguing experiment in leveraging WebAssembly to enable dynamic web development with C#, Blazor has evolved into a mature, fully featured framework. Integral to the ASP.NET Core ecosystem, Blazor offers developers a unique combination of server-side rendering and rich client-side interactivity.

  • Nearest Centroid Classification for Numeric Data Using C#

    Here's a complete end-to-end demo of what Dr. James McCaffrey of Microsoft Research says is arguably the simplest possible classification technique.

  • .NET MAUI in VS Code Goes GA

    Visual Studio Code's .NET MAUI workload, which evolves the former Xamarin.Forms mobile-centric framework by adding support for creating desktop applications, has reached general availability.

Subscribe on YouTube