Custom Login in ASP.NET MVC

public bool IsValid(string _username, string _pwd)

{

string _sql = "Select UserName From TblLogin Where UserName='" + _username + "' And Password='" + _pwd + "'";

SqlConnection cn = new SqlConnection("Your connection String Here");

cn.Open();

SqlCommand cmd = new SqlCommand(_sql, cn);

SqlDataReader dr = cmd.ExecuteReader();

if (dr.Read())

return true;

else

return false;

}

The above code contains some properties for username, password and a remember me option as well it contains one method called IsValid where we are checking our login details in the database.

Still now we only have a model where we have written the login logic to check the user against the database. Now we can use this model in our Account Controllers methods.

Step 5:

In the Account controller we need to create two methods as we said earlier. So create two methods, one for calling model IsValid method and providing authentication and returning the view and the second method for logging the user out like bellow.

[HttpGet]

public ActionResult Login()

{

return View();

}

[HttpPost]

public ActionResult Login(CustomLogin.Models.LoginModel model)

{

if (ModelState.IsValid)

{

if (model.IsValid(model.UserName, model.Password))

{

FormsAuthentication.SetAuthCookie(model.UserName, model.RememberMe);

return RedirectToAction("Index", "Home");

}

else

{

ModelState.AddModelError("", "The user name or password provided is incorrect.");

}

}

return View(model);

}

public ActionResult Logout()

{

FormsAuthentication.SignOut();

return RedirectToAction("Index", "Home");

}

In the above code you see we wrote three methods but previously I said write two methods only but I'm showing three methods because here when the user makes the first request to login then simply we have to return the view and remember both methods with different parameters return the same view. While the first parameter-less login method is used with attribute [HttpGet] to return only view and second method with parameter to check the login and then return the action to index if valid else returns the same view with message.

In the second login method it takes a LoginModel as a parameter where it will check the username and password in our database. In the last method we are just providing signout and returning to action Index of Home controller.

Step 6:

Still now we have controller and methods but don't have any associated view. So add one view by clicking on the first login method and provide the textboxes and one button for taking input from the user.

<div>

<% using (Html.BeginForm()) { %>

<%: Html.ValidationSummary(true, "Login was unsuccessful. Please correct the errors and try again.") %>

<div>

<fieldset>

<legend>Account Information</legend>

<div class="editor-label">

<%: Html.LabelFor(m => m.UserName) %>

</div>

<div class="editor-field">

<%: Html.TextBoxFor(m => m.UserName) %>

<%: Html.ValidationMessageFor(m => m.UserName) %>

</div>

<div class="editor-label">

<%: Html.LabelFor(m => m.Password) %>

</div>

<div class="editor-field">

<%: Html.PasswordFor(m => m.Password) %>

<%: Html.ValidationMessageFor(m => m.Password) %>

</div>

<div class="editor-label">

<%: Html.CheckBoxFor(m => m.RememberMe) %>

<%: Html.LabelFor(m => m.RememberMe) %>

</div>

<p>

<input type="submit" value="Log In" />

</p>

</fieldset>

</div>

<% } %>

</div>

In the above code we are designing our login page with input fields and with validation which we wrote in our model i.e. in LoginModel. In the above code you were not able to access the member of LoginModel until and up to where you are inheriting the page from that model like bellow.

Inherits="System.Web.Mvc.ViewPage<CustomLogin.Models.LoginModel>

Now our login page is also ready. Now you can run the application and see the results. I think you might still be in confusion; we have done the login but how we are going to be logged out? So in the User Control you can see we have kept one action link for logout and calling the Logout method of Account Controller where we are going to logout.

One more thing about the login is to change the configuration so go to root web.config file and change the login url in of forms tag to our login page. Still we don't have any secure directory. It is as usual like in ASP.Net you are using when you are adding any new secure directory then just add one web.config file in that and add the authorization tag to deny unauthenticated user.

Conclusion

In this way we can provide our own login functionality to our application in ASP.NET MVC.