Forms authentication is implemented the same way as in ASP.NET. The first step is to set the authentication mode equal to Forms. The loginUrl points to a controller here rather than a page.
We also need to create a controller where we will check if the user is proper or not. If the user is proper we will set the cookie value.
Hide Copy Code
public ActionResult Login()
{
if ((Request.Form["txtUserName"] == "Tamal") &&
(Request.Form["txtPassword"] == "Tamal@123"))
{
FormsAuthentication.SetAuthCookie("Tamal",true);
return View("About");
}
else
{
return View("Index");
}
}
All the other actions need to be attributed with the Authorize attribute so that any unauthorized user making a call to these controllers will be redirected to the controller (in this case the controller is “Login”) which will do the authentication.
Hide Copy Code
[Authorize]
PublicActionResult Default()
{
return View();
}
[Authorize]
publicActionResult About()
{
return View();
}