ASP.NET forms authentication

最新推荐文章于 2021-02-10 21:36:01 发布

最新推荐文章于 2021-02-10 21:36:01 发布 · 105 阅读

本文介绍如何在应用程序中实现表单认证。主要通过配置web.config文件启用表单认证，并设置登录页面、超时时间等参数。此外，还展示了如何在默认页面中清除缓存和注销当前用户，以及在登录页面中使用Login控件进行身份验证。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

To implement a form authentication, you need add the following code in web.config:

<system.web> <authentication mode="Forms"> <forms loginUrl="logon.aspx" timeout="60" enableCrossAppRedirects="true" name=".ASPXFORMSAUTH"> </forms> </authentication> <authorization> <deny users="?" /> </authorization> </system.web>
enableCrossAppRedirects means authenticated users in this application can be redirected to other applications as authenticated too.

<deny users="?" /> means that unauthenticated users (represented by "?") are denied access to resources in this application.

In default page:

protected void Page_Load(object sender, EventArgs e) { HttpContext.Current.Response.Cache.SetCacheability(HttpCacheability.NoCache); CookiesManager.RemoveAll(); FormsAuthentication.SignOut(); Response.Redirect("Logon.aspx"); }

HttpContext.Current.Response.Cache.SetCacheability(HttpCacheability.NoCache);set no browser cache.

FormsAuthentication.SignOut(); will remove authentication information from cookie for current user.

CookiesManager.RemoveAll(); will remove browser cookies for this application

In Login.aspx:

<div id="Fieldsetcontent"> <asp:Login ID="LoginPage" runat="server" DisplayRememberMe="False" TitleText="" OnLoggingIn="Page_LogIn" /> </div>
In Login.aspx.cs

protected void Page_LogIn(object sender, LoginCancelEventArgs e) { //Authentication code }