Databases
StackOverflow2013
Postsdbo
POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
    primarykey
    data
    text
    <p>I've read everything on this topic I could find, including MSDN articles and SO posts, but I'm still very lost and confused.</p> <h2>Questions</h2> <p>Please answer the following (briefly, if possible):</p> <ol> <li><p>What is <strong>SimpleMembership/SimpleMembershipProvider</strong> (<em>WebMatrix.WebData</em>) and what is it/are they responsible for?</p></li> <li><p>What is <strong>WebSecurity</strong> (<em>WebMatrix.WebData</em>)?</p></li> <li><p>What is the <strong>Membership</strong> (<em>System.Web.Security</em>) class?</p></li> <li><p>Why does MVC4 create a <strong>UserProfile</strong> table and a <strong>webpages_Membership</strong> table? What are they for and what is the difference? What is the UserProfile class that MVC4 creates?</p></li> <li><p>What is the <strong>UsersContext</strong> class?</p></li> <li><p>How do all of these work together to make user authentication?</p></li> </ol> <h2>My Situation</h2> <p>These questions then lead into the next problem:</p> <p>Suppose I have an existing database with users (IDs, Usernames, passwords). I'm creating a new MVC4 application and using Forms Authentication. User passwords are stored in the database in an encrypted form (not bcrypt).</p> <p>What do I have to do to make it work with MVC4?</p> <p>Do I have to create a custom <em>MembershipProvider</em>?</p> <h2>My Knowledge Thus Far</h2> <p>As far as I can understand, <em>WebSecurity</em> is a static class (Module) that interacts with a <em>MembershipProvider</em>. A MembershipProvider is a class that explains how particular functions work, such as <em>ValidateUser</em>, <em>CreateUser</em>, <em>ChangePassword</em>.</p> <p>To solve my problem I assume I need to create a custom MembershipProvider and tell WebSecurity to use my new MembershipProvider.</p> <h2>Bounty?</h2> <p>I have placed a bounty on this question and intend to award it to Andy Brown for an outstanding answer.</p>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USRowan Freeman
    1. USRowan Freeman
    plurals
    1. PL
      singulars
      1. LTLinked
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USs_h
      1. VTFavorite
    2. VO
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USRowan Freeman
      1. VTBountyStart
    3. VO
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USmeda
      1. VTFavorite
    1. COThis is a fairly unpopular opinion but I suggest you stay away from the built in security models of .Net. They're confusing, inefficient and a poor attempt at allowing joe coder to create a secure website. In my opinion if you don't understand how the security works you shouldn't be touching it. Moreover once an attack vector has been discovered for any ASP.Net security setup every website that uses it is vulnerable. If you write your own at least you have the benefit of it's exploits not being documented all around the web. Learn how to create a secure website and use your own implementation.
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USSpencer Ruport
    2. COInteresting, I'll certainly learn more about your suggestion. Thanks.
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USRowan Freeman
    3. COAt the current time, using SSL for logins and registration and SHAx hashing along with password salts will protect you from the most common concerns. Look into how to avoid session spoofing and you'll have as much security as you need for basic website memberships. If you're dealing with credit cards I recommend you do a lot more research.
      singulars
      1. POHow do I use my own database with SimpleMembership and WebSecurity? What is MVC4 security all about?
      1. USSpencer Ruport
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload