ASP .NET Cookie Authentication Tutorial 🎯

Welcome to our comprehensive guide on Cookie Authentication in ASP .NET! In this lesson, we'll walk you through the process of implementing cookie-based authentication in your ASP .NET projects. By the end of this tutorial, you'll understand the concept from the ground up and have practical examples to apply in real-world projects. Let's get started!

What is Cookie Authentication? 📝

Cookie authentication is a common technique used for managing user sessions in web applications. When a user logs in, the application creates a unique identifier (cookie) and sends it to the user's browser. The browser stores this cookie and sends it back with every subsequent request, allowing the application to recognize the user and grant access to protected resources.

Why Use Cookie Authentication? 💡

Stateless: Cookies help maintain session state between requests, making it easier to build scalable applications.
User-friendly: Cookies allow users to remain logged in across multiple sessions and devices.
Simple Implementation: Compared to other authentication methods, cookie authentication is relatively straightforward and easy to implement.

Setting Up a New ASP .NET Project 🎯

To follow along with this tutorial, you'll need to have Visual Studio installed and a new ASP .NET Core Web Application project set up.

dotnet new webapp -o CookieAuthDemo
cd CookieAuthDemo

Adding Cookie Authentication 📝

First, install the required package using the following command:

dotnet add package Microsoft.AspNetCore.Authentication.Cookies

Next, update the ConfigureServices method in the Startup.cs file to include cookie authentication:

csharp

public void ConfigureServices(IServiceCollection services)
{
    services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
        .AddCookie(options =>
        {
            options.LoginPath = "/Account/Login";
            options.AccessDeniedPath = "/Account/AccessDenied";
        });

    services.AddControllersWithViews();
}

Update the Configure method to use the new authentication middleware:

csharp

public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
{
    if (env.IsDevelopment())
    {
        app.UseDeveloperExceptionPage();
    }

    app.UseAuthentication();
    app.UseRouting();

    app.UseAuthorization();

    app.UseEndpoints(endpoints =>
    {
        endpoints.MapControllerRoute(
            name: "default",
            pattern: "{controller=Home}/{action=Index}/{id?}");
    });
}

Creating a Login Controller 📝

Create a new controller called AccountController and add the necessary code:

csharp

using Microsoft.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

public class AccountController : Controller
{
    public IActionResult Login()
    {
        return View();
    }

    [HttpPost]
    [AllowAnonymous]
    public async Task<IActionResult> Login(string userName, string password)
    {
        // Perform user authentication logic here.
        // For example, check the userName and password against a database.

        // If the user is authenticated, sign them in:
        await HttpContext.SignInAsync(User.Identity);

        return RedirectToAction("Index", "Home");
    }

    public IActionResult AccessDenied()
    {
        return View();
    }
}

Create the Login view in the Views/Account folder and include a form to handle user authentication:

html

@model AccountController

<h2>Login</h2>

<form method="post">
    <div>
        <label for="userName">User Name:</label>
        <input type="text" id="userName" name="userName" />
    </div>
    <div>
        <label for="password">Password:</label>
        <input type="password" id="password" name="password" />
    </div>
    <button type="submit">Login</button>
</form>

Testing the Application 🎯

Run the application and navigate to the login page by going to https://localhost:5001/Account/Login.
Enter a valid user name and password (if you're following along, we'll assume "user" and "password" for now) and click "Login."
You should now be redirected to the home page, indicating successful authentication.

Quiz 📝

By now, you should have a solid understanding of cookie authentication in ASP .NET. As you continue to work on your projects, remember to always strive for secure and user-friendly implementations! ✅

For more advanced examples and exercises, keep an eye on upcoming lessons here at CodeYourCraft. Happy coding! 🚀