ASP.NET MVC 4 Membership, Users, Passwords, Roles, Profile, Authentication and Authorization

----------------
The easy way: Azure Site Extension to Add/Edit Users and Roles: 
http://aaron-hoffman.blogspot.com/2016/08/aspnet-mvc-5-user-admin.html
https://www.nuget.org/packages/AspNetUserMaintenanceAzureSiteExtension/
(old: https://www.siteextensions.net/packages/AspNetUserMaintenanceAzureSiteExtension/)
----------------

----------------
TLDR: Search for this line in your project and update it:

WebSecurity.InitializeDatabaseConnection("DefaultConnection", "UserProfile", "UserId", "UserName", autoCreateTables: true);
----------------


There is a new Membership Provider in ASP.NET MVC 4 that can be used for Membership, Users, Passwords, Roles, Profile, Authentication and Authorization!  It is called the Simple Membership Provider.  It uses the WebMatrix WebData WebSecurity class as a facade.

The Old Way


You will no longer need to execute the old .NET 2.0 aspnet_regsql.exe like this:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe -sqlexportonly C:\aspnet_membership.sql -A all

Or even execute the newer scripts updated for SQL Azure:
InstallCommon.sql
InstallMembership.sql
InstallRoles.sql
http://archive.msdn.microsoft.com/KB2006191
http://support.microsoft.com/kb/2006191

You won't even have to change the Web.config AspNetSqlMembershipProvider, SqlProfileProvider, or SqlRoleProvider applicationName, or ApplicationServices connection string, or profile, role provider or roleManager settings.


The New Way


Now all you need to do is update one line of code!

After creating a new ASP.NET MVC 4 "Internet Application" - update the following line in the [Project Folder]/Filters/InitializeSimpleMembershipAttribute.cs file:

(Note: this file contains a class that inherits from ("is a") ActionFilterAttribute.  The default ~/Controllers/AccountController.cs class is adorned with this attribute.  This means that a route associated with the AccountController needs to be called before the SimpleMembershipProvider will be initialized.  The code within this attribute can be merged into the Global.asax.cs file so that the SimpleMembershipProvider is initialized at application startup.  An example of that code is available via the link below.)


Search for this line in your project and update it:

WebSecurity.InitializeDatabaseConnection("DefaultConnection", "UserProfile", "UserId", "UserName", autoCreateTables: true);


"DefaultConnection" can be found in the [Project Folder]/Web.config file

"UserProfile" is the name of your own User table (can have any structure as long as it has UserId and UserName columns)

"UserId" is the name of a column in your User table that holds the User's Id

"UserName" is the name of a column in your User table that can hold a UserName

autoCreateTables: true - will create all the tables needed by the new Simple Membership Provider if they do not already exist.  The link below contains the SQL for the tables created:

https://gist.github.com/aaronhoffman/7e30ded25cbd0590497197c4dabde9b4

And only tables are created.  No aspnet_* stored procedures, no SQL views, no SQL Database Roles, only tables!



Simple Table Definitions


dbo.webpages_Membership
UserId                                     int
CreateDate                                 datetime
ConfirmationToken                          nvarchar(128)
IsConfirmed                                bit
LastPasswordFailureDate                    datetime
PasswordFailuresSinceLastSuccess           int
Password                                   nvarchar(128)
PasswordChangedDate                        datetime
PasswordSalt                               nvarchar(128)
PasswordVerificationToken                  nvarchar(128)
PasswordVerificationTokenExpirationDate    datetime

dbo.webpages_OAuthMembership
Provider               nvarchar(30)
ProviderUserId         nvarchar(100)
UserId                 int

dbo.webpages_Roles
RoleId                 int
RoleName               nvarchar(256)

dbo.webpages_UsersInRoles

UserId                 int
RoleId                 int


Initialize SimpleMembershipProvider in Global.asax.cs Application_Start()


As mentioned previously in this post, by default the WebSecurity.InitializeDatabaseConnection() call is within the InitializeSimpleMembershipAttribute class, and by default the AccountController is adored with this attribute.  The trouble with that is that a route associated with the AccountController must first be invoked for the SimpleMembershipProvider to be initialized - this is not ideal.  Instead, that initialization can take place in the Global.asax.cs Application_Start() method so that it is initialized at application startup.  See the link below for an example.  Be sure to change the "MvcApplication1" to be the namespace of your own project.

https://gist.github.com/aaronhoffman/7e30ded25cbd0590497197c4dabde9b4



More Info:
http://blog.osbornm.com/2010/07/21/using-simplemembership-with-asp.net-webpages/
and
http://weblogs.asp.net/jgalloway/archive/2012/08/29/simplemembership-membership-providers-universal-providers-and-the-new-asp-net-4-5-web-forms-and-asp-net-mvc-4-templates.aspx

Comments

Scott Anderson said…
Good stuff, how do you use security groups instead of named users?
Aaron Hoffman said…
@Scott Anderson - could you be more specific? What do you mean by "security groups"? Are you trying to integrate with Active Directory? Likely that is not something that would involve the default Simple Membership Provider. I am not aware if a Active Directory implementation exists for the Simple Membership Provider, you may need to create your own.

Popular posts from this blog

Search iPhone Text Messages with SQLite SQL Query

How to Turn Off Microsoft Arc Touch Mouse Scroll Sound Vibration

Configure SonarAnalyzer.CSharp with .editorconfig, no need for SonarCloud or SonarQube