Replace forms authentication with claims based authentication : The Official Microsoft ASP.NET Forums

Reply

zwartmark

Member

351 Points

Replace forms authentication with claims based authentication

Jan 27, 2013 08:21 PM|LINK

I'm trying to replace my current forms authentication with claimsbased authentication. However what is the recommended approach to do this. I can set the current principle like this.

If System.Web.Security.Membership.ValidateUser(userName, PasswordTextBox.Text) Then
            Dim principal As New ClaimsPrincipal(New ClaimsIdentity(New List(Of Claim) From {New Claim(ClaimTypes.Name, userName)}, "Forms"))
            FederatedAuthentication.FederationConfiguration.IdentityConfiguration.ClaimsAuthenticationManager.Authenticate(String.Empty, principal)
       
                Response.Redirect(Me.ReturnUrl)

Else

FailureLabel.Text = "Login attempt failed"

End If

This is working just fine, but I also read some examples where de principal is checked on every request (in global.asax or as module) on Post_AuthenticateRequest, like this:

 Public Sub Init(context As HttpApplication) Implements IHttpModule.Init
            AddHandler context.PostAuthenticateRequest, AddressOf PostAuthenticateRequest
        End Sub

        Private Sub PostAuthenticateRequest(sender As Object, e As EventArgs)

            Dim context = DirectCast(sender, HttpApplication).Context
            If FederatedAuthentication.SessionAuthenticationModule IsNot Nothing AndAlso FederatedAuthentication.SessionAuthenticationModule.ContainsSessionTokenCookie(context.Request.Cookies) Then
                Return
            End If

            Dim authenticationManager = FederatedAuthentication.FederationConfiguration.IdentityConfiguration.ClaimsAuthenticationManager
            If authenticationManager IsNot Nothing Then

                Dim transformedPrincipal = authenticationManager.Authenticate(context.Request.RawUrl, TryCast(context.User, ClaimsPrincipal))
                context.User = transformedPrincipal
                Thread.CurrentPrincipal = transformedPrincipal
            End If
        End Sub

What is the recommend approach?