membership in asp.net...if only
DESCRIPTION
Membership in ASP.Net...if only. Presented by: Patrick Hynds President, CriticalSites Microsoft Regional Director. Agenda. Membership Provider Model Custom Providers SOA based membership example Making a custom provider do what the standard ones won’t (Demo). Membership Service. - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/1.jpg)
Membership in ASP.Net...if only
Presented by:Patrick Hynds President, CriticalSitesMicrosoft Regional Director
![Page 2: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/2.jpg)
Agenda• Membership • Provider Model• Custom Providers
– SOA based membership example– Making a custom provider do what the
standard ones won’t (Demo)
![Page 3: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/3.jpg)
• Membership API• Included Membership providers
– SQL Server (and SQL Express)– Active Directory (Windows)– Access (kind of…)
• Installs as a Visual Studio 2005 VSI template
• Custom Membership providers– Oracle– MySQL– SQLLite3– Others + whatever you write yourself…
Membership Service
![Page 4: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/4.jpg)
Membership Service• Service for managing users and credentials
– Declarative access via Web Site Admin Tool– Programmatic access via Membership and
MembershipUser classes• Membership class provides base services• MembershipUser class represents users
and provides additional services• Provider-based for flexible data storage
![Page 5: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/5.jpg)
Membership Service (cont.)• Vastly simplifies forms authentication
– Provides logic for validating user names and passwords, creating accounts, and more
– Provides data store for storing credentials, e-mail addresses, and other membership data
![Page 6: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/6.jpg)
Membership Schema
Membership API
MembershipData
SQL Server OtherData Stores
Membership Providers
ActiveDirectory
Login LoginStatus LoginView Other
Controls
Membership MembershipUser
SqlMembershipProvider
ActiveDirectory-MembershipProvider
Other Providers
![Page 7: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/7.jpg)
LoginView<asp:LoginView ID="LoginView1" Runat="server"> <AnonymousTemplate> <!-- Content seen by unauthenticated users --> </AnonymousTemplate> <LoggedInTemplate> <!-- Content seen by authenticated users --> </LoggedInTemplate> <RoleGroups> <asp:RoleGroup Roles="Administrators"> <ContentTemplate> <!-- Content seen by administrators --> </ContentTemplate> </asp:RoleGroup> ... </RoleGroups></asp:LoginView>
![Page 8: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/8.jpg)
The Membership Class
• Provides static methods for performing key membership tasks– Creating and deleting users– Retrieving information about users– Generating random passwords– Validating logins
• Also includes read-only static properties for acquiring data about provider settings
![Page 9: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/9.jpg)
The MembershipUser Class
• Represents individual users registered in the membership data store
• Includes numerous properties for getting and setting user info
• Includes methods for retrieving, changing, and resetting passwords
• Returned by Membership methods such as GetUser and CreateUser
![Page 10: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/10.jpg)
Configuring the SQL Membership Provider
![Page 11: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/11.jpg)
Provider Model• Enable new functionality in a transparent fashion• Enable extensibility for
– Web services– Browser based “Atlas” clients– Smart clients
• Application services as pluggable building blocks• Decoupled via configuration• Use structural classes for your own features
![Page 12: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/12.jpg)
Provider ModelFeature Lifecycle
Feature Feature config.config.
Static Static feature feature classclass
Provider Provider instanceinstance
ss
![Page 13: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/13.jpg)
Provider Configuration
• Membership providers support a number of configuration settings– How should passwords be stored (cleartext,
hashed, encrypted)?– Should password recovery be enabled?– Must each user have a unique e-mail address?
• Exposed as properties of provider class• Initialized from CONFIG files
![Page 14: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/14.jpg)
public class QuotationsConfiguration : public class QuotationsConfiguration : ConfigurationSectionConfigurationSection{{ [ConfigurationProperty("providers")][ConfigurationProperty("providers")] public ProviderSettingsCollection Providerspublic ProviderSettingsCollection Providers {{ get;get; }}
[ConfigurationProperty("defaultProvider", [ConfigurationProperty("defaultProvider", DefaultValue = "StaticQuotationProvider")]DefaultValue = "StaticQuotationProvider")] public string DefaultProviderpublic string DefaultProvider {{ get;get; set;set; }}}}
Provider ModelFeature Configuration
![Page 15: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/15.jpg)
When to Build a Provider• Physical 3-tier deployments
– May not allow web server to connect directly to SQL Server• Schema isn’t working for you• Your data isn’t in a supported format or repository• You need that killer feature that isn’t provided by
existing providers
![Page 16: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/16.jpg)
Projecting MembershipDesign Issues
• Authenticating to the web service– Not all methods should be public
• Serialization of MembershipUser– Read-only properties don’t serialize
• WebMethod parameter constraints– Collection types and [out] parameters
• Selecting from multiple providers– Choosing a non-default provider
![Page 17: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/17.jpg)
Projecting Membership3-Tier Flow
Web serverWeb server
Webservice Webservice providerprovider
Webservice serverWebservice server
.asmx .asmx MembershiMembership wrapperp wrapper
SQL SQL providerprovider
Application Application codecode
![Page 18: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/18.jpg)
Projecting MembershipAuthenticated Flow
Internet Internet clientclient
ApplicatiApplicationon
Webservice serverWebservice server
.asmx .asmx MembershiMembership wrapperp wrapper
SQL SQL providerprovider
.asmx .asmx Formsuth Formsuth wrapperwrapper
““login”login”
Returns forms Returns forms ticketticket
pass ticket w/
pass ticket w/ each request
each requestValidateValidate
ticket and ticket and rolesroles
![Page 19: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/19.jpg)
Creating a Custom Membership Provider
![Page 20: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/20.jpg)
Summary • Rewrite or enhance features• Project current features onto other platforms
via web services or other methods• Use the provider infrastructure for your own
features• Don’t screw it up, you can always make life
worse – especially in security
![Page 21: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/21.jpg)
ResourcesCustom Membership Providers• Oracle Provider
– Supports Membership, Roles and Personalization – Included in the PetShop sample– http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/dnbda/html/bdasamppet4.asp• Access Database Provider
– Supports Membership, Roles and Personalization– Installs as a Visual Studio 2005 VSI template– http://msdn.microsoft.com/vstudio/eula.aspx?
id=96713a8e-b8d4-4d6e-bb8f-027e6c8e15d8
![Page 22: Membership in ASP.Net...if only](https://reader036.vdocuments.mx/reader036/viewer/2022062520/56815e32550346895dcc9238/html5/thumbnails/22.jpg)
ResourcesCustom Membership Providers (cont.)• MySQL Provider
– Support for ASP.NET Membership and Roles– http://www.codeproject.com/aspnet/
MySQLMembershipProvider.asp• SQLLite3
– Supports Membership and Roles– http://www.eggheadcafe.com/articles/
20051119.asp