ASP.NET MVC3 User Login

Question

I have a User model with:

[Required]
public string Password { get; set; }

[Required]
public string UserName { get; set; }

I have a MyMembershipProvider : MembershipProvider containing:

public override bool ValidateUser(string username, string password)
{
   if (username == ConfigurationManager.AppSettings["DefaultUsername"] && password == ConfigurationManager.AppSettings["DefaultUserPassword"])
   {
       return true;
   }
   else
   {
       return false;
   }
}

My LogOn action looks like:

[HttpPost]
    public ActionResult LogOn(User model, string returnUrl)
    {
        if (ModelState.IsValid)
        {
            if (Membership.ValidateUser(model.UserName, model.Password))
            {
                return RedirectToAction("Index", "Home");
            }
            else
            {
                ModelState.AddModelError("", "The user name or password provided is incorrect.");
            }
        }

        // If we got this far, something failed, redisplay form
        return View(model);
    }

The Problem:

When I specify the correct username and password, I can't seem to go to actions and controllers which contain the [Authorize] attribute. When I use breakpoint, it DOES fall in to return RedirectToAction("Index", "Home"); but denies access to the Index page.

Can anyone see where I am going horribly wrong?

I would definitely not recommend storing any type of credentials in your web.config on a live site. — James
– James, Commented Oct 4, 2012 at 14:55
This is just temporary. I will have a proper implementation later on :) — Subby
– Subby, Commented Oct 4, 2012 at 15:21

Paul Fleming · Accepted Answer · 2012-10-04 14:47:53Z

4

You need to set the auth cookie so the next action recognises that the user is authenticated.

....
if (Membership.ValidateUser(model.UserName, model.Password))
{
    FormsAuthentication.SetAuthCookie(model.UserName, true);
    return RedirectToAction("Index", "Home");
}
....

answered Oct 4, 2012 at 14:47

Paul Fleming

24.6k8 gold badges79 silver badges113 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Subby Over a year ago

Thank you. That worked. I understand now why the SetAuthCookie is required :)

Collectives™ on Stack Overflow

ASP.NET MVC3 User Login

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related