Visual Basic 2015 Unleashed

Forcing Login for Security

The sample web application that was illustrated in the previous section has one important limitation: It can be accessed by anonymous users who can access important data. If your application just presents information, anonymous access is typically fine. But if your application has the purpose of managing data or restricted information, you need to force users to log in with their own credentials, such as a username and password. Together with One ASP.NET, Microsoft introduced into ASP.NET a new security model called ASP.NET Identity. It provides an improved way to manage security and simplifies the way users access sensitive information by generating proper login pages and the necessary code when creating a project. ...