ASP NetMVC Core Secure App Authorize

Screenshot from the tutorial

Building a Secure ASP.NET Core MVC Application in Under 4 Minutes

In today's digital landscape, security is paramount for any web application. In this tutorial, inspired by the YouTube video titled "ASP NetMVC Core Secure App Authorize," we will walk through the essential steps to authorize users in an ASP.NET Core MVC application. By the end of this guide, you will have a foundational understanding of implementing security measures to protect your application.

Prerequisites

Before diving into the code, ensure you have the following:

• Visual Studio or Visual Studio Code installed
• .NET SDK installed on your machine
• Basic understanding of C# and ASP.NET Core MVC

Step 1: Setting Up Your Project

First, let's create a new ASP.NET Core MVC project. Open your terminal or command prompt and run the following command:

dotnet new mvc -n SecureApp
cd SecureApp

This command creates a new MVC project named "SecureApp" and navigates into the project directory.

Step 2: Adding Authentication

To secure your application, we need to set up authentication. We will use ASP.NET Core Identity, which provides a robust authentication mechanism.

1. Install the necessary NuGet packages. Run the following commands in your terminal:

   dotnet add package Microsoft.AspNetCore.Identity.EntityFrameworkCore
   dotnet add package Microsoft.AspNetCore.Authentication
   

2. Update the Startup.cs file to configure Identity and set up the database context.

   public void ConfigureServices(IServiceCollection services)
   {
       services.AddDbContext<ApplicationDbContext>(options =>
           options.UseSqlServer(Configuration.GetConnectionString("DefaultConnection")));
   
       services.AddIdentity<IdentityUser, IdentityRole>()
           .AddEntityFrameworkStores<ApplicationDbContext>()
           .AddDefaultTokenProviders();
   
       services.AddControllersWithViews();
   }
   

3. Add the database connection string in your appsettings.json:

   {
     "ConnectionStrings": {
       "DefaultConnection": "Server=(localdb)\\mssqllocaldb;Database=SecureApp;Trusted_Connection=True;MultipleActiveResultSets=true"
     }
   }
   

Step 3: Creating User Registration and Login

Next, we need to create user registration and login functionalities.

1. Create a new controller named AccountController:

   public class AccountController : Controller
   {
       private readonly UserManager<IdentityUser> _userManager;
       private readonly SignInManager<IdentityUser> _signInManager;
   
       public AccountController(UserManager<IdentityUser> userManager, SignInManager<IdentityUser> signInManager)
       {
           _userManager = userManager;
           _signInManager = signInManager;
       }
   
       [HttpGet]
       public IActionResult Register() => View();
   
       [HttpPost]
       public async Task<IActionResult> Register(RegisterViewModel model)
       {
           if (ModelState.IsValid)
           {
               var user = new IdentityUser { UserName = model.Email, Email = model.Email };
               var result = await _userManager.CreateAsync(user, model.Password);
   
               if (result.Succeeded)
               {
                   await _signInManager.SignInAsync(user, isPersistent: false);
                   return RedirectToAction("Index", "Home");
               }
               foreach (var error in result.Errors)
               {
                   ModelState.AddModelError(string.Empty, error.Description);
               }
           }
           return View(model);
       }
   
       [HttpGet]
       public IActionResult Login() => View();
   
       [HttpPost]
       public async Task<IActionResult> Login(LoginViewModel model)
       {
           if (ModelState.IsValid)
           {
               var result = await _signInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, lockoutOnFailure: false);
               if (result.Succeeded)
               {
                   return RedirectToAction("Index", "Home");
               }
               ModelState.AddModelError(string.Empty, "Invalid login attempt.");
           }
           return View(model);
       }
   }
   

2. Create the corresponding views for registration and login. Use Razor syntax to create forms that post data back to your controller.

Step 4: Securing Your Application

To protect your application, you can use the [Authorize] attribute to restrict access to certain controllers or actions.

1. Apply the [Authorize] attribute to your Controller or specific actions. For instance, to secure your home page:

   [Authorize]
   public class HomeController : Controller
   {
       public IActionResult Index() => View();
   }
   

2. Add a logout method in your AccountController:

   public async Task<IActionResult> Logout()
   {
       await _signInManager.SignOutAsync();
       return RedirectToAction("Index", "Home");
   }
   

Step 5: Running Your Application

Finally, it’s time to run your application. Execute the following command in your terminal:

dotnet run

Navigate to http://localhost:5000 in your browser. You should be able to register a new user, log in, and access secured pages.

Conclusion

In just a few steps, we have set up a secure ASP.NET Core MVC application with user authentication. This foundational framework allows you to build more complex features and ensure your application is protected against unauthorized access.

For further learning, consider exploring advanced topics such as role-based authorization, JWT authentication, and integrating third-party authentication providers. Happy coding!

Another view from the tutorial

---

Connect with SkillBakery Studios

Explore more tutorials, tools, and resources:

• skillbakery.com
• Facebook
• X (Twitter)
• YouTube Channel

Posted by SkillBakery Studios