HTTP Authentication in .NET

Question

Is it possible to create a .NET equivalent to the following code?

<?php
if (!isset($_SERVER['PHP_AUTH_USER'])) {
    header('WWW-Authenticate: Basic realm="My Realm"');
    header('HTTP/1.0 401 Unauthorized');
    echo 'Text to send if user hits Cancel button';
    exit;
} else {
    echo "<p>Hello {$_SERVER['PHP_AUTH_USER']}.</p>";
    echo "<p>You entered {$_SERVER['PHP_AUTH_PW']} as your password.</p>";
}
?>

I would like to be able to define a static user/password in the web.config as well. This is very easy to do in PHP, haven't seen anything explaining how to do this in MSDN.

All I want is this:

I would like to add, the OP is not looking for Forms Authentication. — leppie
– leppie, Commented Sep 29, 2008 at 16:12
This is pretty Apache-centric, which is why most .net people won't know where this code is from and what it does (exactly). You might want to re-phrase, e.g. that you want Basic-Auth (check first that IIS supports it, etc..). — Till
– Till, Commented Sep 29, 2008 at 16:13

VVS · Accepted Answer · 2008-09-29 16:28:14Z

3

The easiest way to achieve the same as with the PHP code would be to directly send the same headers via Reponse.AppendHeader().

Still I would suggest you to read an ASP.NET Forms Authentication Tutorial.

answered Sep 29, 2008 at 16:28

VVS

19.6k5 gold badges50 silver badges66 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Jan Bühler Over a year ago

One can also use response.Headers.Add("WWW-Authenticate", "Basic realm=\"Page only available with password\"");

Andrei Rînea · Accepted Answer · 2008-09-29 19:23:13Z

2

You need to implement basic authentication in ASP.NET not forms authentication as the above responders said. A good example can be found here .

answered Sep 29, 2008 at 19:23

Andrei Rînea

20.9k18 gold badges124 silver badges172 bronze badges

Comments

mattlant · Accepted Answer · 2008-09-29 15:58:17Z

0

Yes, you can add to web.config and use forms authentication. I dont know php, so i cant help witjh the rest of your question

http://msdn.microsoft.com/en-us/library/aa720092(VS.71).aspx\

answered Sep 29, 2008 at 15:58

mattlant

15.4k4 gold badges37 silver badges44 bronze badges

Comments

palmsey · Accepted Answer · 2008-09-29 16:05:19Z

0

Yes, you can specify credentials in the web.config. ASP.NET also has a built-in membership system and has controls like Login to work with it - although this is different from setting static credentials in the web.config.

I think the easiest way to do what you're talking about is to protect the directory in IIS.

answered Sep 29, 2008 at 16:05

palmsey

5,8623 gold badges39 silver badges41 bronze badges

Comments

mattlant · Accepted Answer · 2008-09-29 16:06:54Z

0

I typically do my own authentication is asp.net against my own username and passwords in a database. For the way I do it, I create a username and password dialog on a page, and have a login button. During postback i do something like:

if(SecurityHelper.LoginUser(txtUsername.Text, txtPassword.Text))
{
    FormsAuthentication.RedirectFromLoginPage(txtUsername.Text, true);
}

Do with that in mind all you need to do is the same, check the username and password against whatveer you want, you can even hardcode if you want buy i wouldnt recommend it. \if its valid use the formsauthentication class's static methods.

answered Sep 29, 2008 at 16:06

mattlant

15.4k4 gold badges37 silver badges44 bronze badges

Comments

mattlant · Accepted Answer · 2008-09-29 16:25:22Z

0

I am afraid I cant help you. I dont know how to get a dialog like that besides using a different security setup in IIS, such as integrated security (windows security). If that is all you want then you need to go into IIS and disable anonymous access, enable another auth type, such as integrated, basic,, and in your code you can verify they are logged in by checking:

System.Security.Principal.WindowsIdentity.GetCurrent().IsAuthenticated

Although IIS takes care of verification in this case. Other than that i cant help you out.

In case you need it, a link to windows auth in asp.net: http://msdn.microsoft.com/en-us/library/ms998358.aspx

edited Sep 29, 2008 at 16:25

answered Sep 29, 2008 at 16:20

mattlant

15.4k4 gold badges37 silver badges44 bronze badges

Collectives™ on Stack Overflow

HTTP Authentication in .NET

6 Answers 6

1 Comment

Comments

Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

1 Comment

Comments

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related