Clever Geek Handbook

ASP.NET Authentication Options

I am creating an asp.net application using only some Lite data access from xml files. However, I need to be able to authenticate administrative users (via forms) in order to manage this data. I don't want to get up sql db just for authentication purposes. I would like to use xml but not sure about the security with this. Any suggestions? Custom Role Provider? MyOpenID?

0


source to share


2 answers


Form Authentication and Membership Preservation in web.config.



Ideally, this information should be encrypted or hashed in some way. User management is easier and more scalable with db, but MS allows storage in web.config and possibly other providers.

+1


source


I agree with StingyJack, but when you set up Authentication Forms make sure you use some for encryption. Even if you have servers, you need this ... What if someone figures out how to load your XML files?

Here are some encryption options:



Now, if you want to steer clear of using XML files to store user authentication information, you can take a look at SQLite . It is a very lightweight database - much lighter than SQL Server (express or otherwise) and easy to implement. Below is a link to .NET libraries.

http://sqlite.phxsoftware.com/

+1


source






More articles:


All Articles