Practical Asp Net Identity Example Tutorial For Beginners

ASP.NET Identity is a powerful, extensible authentication system that is a part of the ASP.NET Core framework. If you're building web applications, understanding how to use ASP.NET Identity is crucial. Here, we'll explore ASP.NET Identity with an example to help you grasp its core concepts and functionalities.

ASP.NET Identity simplifies authentication and authorization tasks by providing a high-level, extensible framework. It handles user registration, login, password reset, and more. Let's dive into an example walkthrough.

Setting Up ASP.NET Identity in a Project

Before we begin, ensure you have the latest version of .NET installed. Then, create a new ASP.NET Core MVC project with Individual User Accounts authentication, which uses ASP.NET Identity.

The project template sets up ASP.NET Identity for you, including necessary models, DbContext, and controller actions for registration, login, and other account management features.

Creating a Custom User Role

ASP.NET Identity supports role-based authorization. Let's create a custom role for administering the application.

First, update the IdentityRole model in your application's DbContext. Then, use the RoleManager to create a new role in the Configure method of your Startup class:

  public void Configure(IApplicationBuilder app, IWebHostEnvironment env, IRoleManager roleManager)
{
    if (!roleManager.Roles.Any())
    {
        roleManager.CreateAsync(new IdentityRole { Name = "Admin" }).GetAwaiter().GetResult();
    }
}

Adding Users to Roles

Next, add users to the 'Admin' role during their creation or afterward using the UserManager:

  var result = await userManager.CreateAsync(new ApplicationUser { UserName = "admin", Email = "admin@example.com" }, "password");
if (result.Succeeded)
{
    var user = await userManager.FindByEmailAsync("admin@example.com");
    await userManager.AddToRoleAsync(user, "Admin");
}

Implementing Custom Login and Logout

ASP.NET Identity provides built-in controllers for login and logout. However, you can also implement custom controllers to extend or override default behavior.

Create a new controller named AccountController and override the login and logout actions:

  public class AccountController : Controller
{
    private readonly SignInManager<ApplicationUser> _signInManager;

    public AccountController(SignInManager<ApplicationUser> signInManager)
    {
        _signInManager = signInManager;
    }

    public async Task Login(string returnUrl = "/")
    {
        // Your custom login logic here...
    }

    public async Task Logout()
    {
        // Your custom logout logic here...
    }
}

Implementing Custom Login

In the Login action, you can perform custom login logic, such as validating against additional data sources or implementing two-factor authentication.

Don't forget to handle the returnUrl parameter to redirect users to the page they were trying to access before logging in.

Implementing Custom Logout

In the Logout action, you can handle custom logout logic, such as revoking tokens or deleting user sessions from other services.

After performing any custom logic, call await _signInManager.SignOutAsync(); to complete the logout process.

ASP.NET Identity offers extensive customization options to fit your application's security needs. With this example, you've learned how to create custom roles, manage user roles, and implement custom login and logout controllers.

Now that you have a solid understanding of ASP.NET Identity, explore its other features, such as password hashing, account confirmation, and two-factor authentication. Keep enhancing your application's security and user experience with ASP.NET Identity.