Security

Re: Using Email as UserName

relish27 — Mon, 18 May 2009 19:48:42 GMT

Have you had luck with this? I am looking into doing this -- it also looks like this isn't the only table that the email appears in. Do you feel that this is a safe option?

Re: Using Email as UserName

mfreeman — Thu, 18 Dec 2008 22:47:35 GMT

Scott W:
For the CreateUserWizard control, you'll need to template it and label the username textbox as email address. Then set an event handler for the CreatingUser event:
public void RegisterNewUser_CreatingUser(object sender, System.EventArgs e)
{
CreateUserWizard cuw = (CreateUserWizard)sender;
cuw.Email = cuw.UserName;
}

Then template your login control and set the label on the username textbox to email address, and put in a regex validation control to make sure they enter a valid email address.

This did the trick for me!

Thanks!

Re: Using Email as UserName

Inno101 — Thu, 19 Jun 2008 15:40:03 GMT

of course, missed that

I would like to implement your solution to my site. It's by far the most robust that has been suggested beyond creating a custom provider (why bother if you don't have to!). Well done for your depth of thought.

I'm no expert though and would need some guidance. Would you be willing to give me a helping hand trying to get it rolling?

Yours Hopefully,

Mark

Re: Using Email as UserName

radmanmm — Tue, 03 Jun 2008 20:05:02 GMT

Inno101:
HI Maybe i've missed something but what happens if you have two people with the same name?

What does that matter? The Guid will ensure uniqueness.

Re: Using Email as UserName

Inno101 — Tue, 03 Jun 2008 16:15:07 GMT

HI Maybe i've missed something but what happens if you have two people with the same name?

Re: Using Email as UserName

radmanmm — Mon, 28 Apr 2008 19:00:45 GMT

Ok Great.

Re: Using Email as UserName

cartch2008 — Mon, 28 Apr 2008 18:53:06 GMT

radmanmm...can' you point me to where this might be? I don't see it

sorry, found it...

requiresUniqueEmail="true"

Re: Using Email as UserName

kenmaster — Fri, 18 Apr 2008 04:19:10 GMT

HI there,

I tried to follow but I got into one of the problem that is my Email was duplicated. It turn out that the ASP_User table created 2 records for the same user. One for the membership and the other one for the profile. How can I solve this problem??

Thanks you all

Ken

Re: Using Email as UserName

radmanmm — Tue, 15 Apr 2008 22:26:31 GMT

Darpa:
radmanmm:
And finally in the PasswordRecovery control I added this code:

protected void Page_Load(object sender, EventArgs e)
{

if (Session["email"] != null) {
string username = Membership.GetUserNameByEmail(Session["email"].ToString());
PasswordRecovery1.UserName = username;

}

}

Can you explain the purpose of the above section of code?
If someone goes to the password recovery page, after logging out their username shows in the box. and from the logic of your handling of the email as username, i don't know what this section of code is supposed to do.

Darpa, this code was written quite a while ago for me, your best bet would be to wire it up and step through it. Sorry.

Darpa:
radmanmm:
protected void PasswordRecovery1_VerifyingUser(object sender, LoginCancelEventArgs e) {
string username = Membership.GetUserNameByEmail(PasswordRecovery1.UserName);
        if (string.IsNullOrEmpty(username))
        {
            lblWarning.Text = "The submitted email does not exist";
            return;
        }
if (username != null) {
//we have an email address
Session["email"] = PasswordRecovery1.UserName;
PasswordRecovery1.UserName = username;

}

else if (!String.IsNullOrEmpty(PasswordRecovery1.UserName)) {
//we have a userName
MembershipUser user = Membership.GetUser(PasswordRecovery1.UserName);
PasswordRecovery1.UserName = user.Email;

Session["email"] = user.Email;
}

}
You might also want to consider adding this:
        if (string.IsNullOrEmpty(username))
        {
		// send a message to a blank warning label on the page
            WarningLabel.Text = "The submitted email does not exist";
            return;
        }
 to the password recovery, if someone enters their email in wrong or an email that doesn't exist, an exception is thrown. 

This is true Darpa, you should ensure that you are trapping the logic. again since this has been such a long time, I can only guess that it was not production ready when I posted it. Thanks for the catch.

Re: Using Email as UserName

Darpa — Tue, 15 Apr 2008 21:00:21 GMT

radmanmm:
And finally in the PasswordRecovery control I added this code:

protected void Page_Load(object sender, EventArgs e)
{

if (Session["email"] != null) {
string username = Membership.GetUserNameByEmail(Session["email"].ToString());
PasswordRecovery1.UserName = username;

}

}

Can you explain the purpose of the above section of code?

If someone goes to the password recovery page, after logging out their username shows in the box. and from the logic of your handling of the email as username, i don't know what this section of code is supposed to do.

radmanmm:
protected void PasswordRecovery1_VerifyingUser(object sender, LoginCancelEventArgs e) {
string username = Membership.GetUserNameByEmail(PasswordRecovery1.UserName);
        if (string.IsNullOrEmpty(username))
        {
            lblWarning.Text = "The submitted email does not exist";
            return;
        }
if (username != null) {
//we have an email address
Session["email"] = PasswordRecovery1.UserName;
PasswordRecovery1.UserName = username;

}

else if (!String.IsNullOrEmpty(PasswordRecovery1.UserName)) {
//we have a userName
MembershipUser user = Membership.GetUser(PasswordRecovery1.UserName);
PasswordRecovery1.UserName = user.Email;

Session["email"] = user.Email;
}

}

You might also want to consider adding this:

        if (string.IsNullOrEmpty(username))
        {
		// send a message to a blank warning label on the page
            WarningLabel.Text = "The submitted email does not exist";
            return;
        }

 to the password recovery, if someone enters their email in wrong or an email that doesn't exist, an exception is thrown.

Re: Using Email as UserName

radmanmm — Mon, 31 Mar 2008 21:23:32 GMT

the provider has an attribute for requiring unique emails.

Re: Using Email as UserName

cartch2008 — Mon, 31 Mar 2008 16:56:44 GMT

How are you preventing the same email address from being used more than once?

Re: Using Email as UserName

engwar — Fri, 24 Aug 2007 14:05:18 GMT

D'oh!

That was indeed the problem. Thanks.

Again, thanks also for providing the code samples. Sure is a great solution!

Re: Using Email as UserName

radmanmm — Fri, 24 Aug 2007 03:08:06 GMT

hmm... you do have the CreatingUser event bound to the object right?

To check open the page in the designer, select the control and then view the events in the properties window. Make sure you have the control bound to the CreatingUser event.

Re: Using Email as UserName

engwar — Fri, 24 Aug 2007 02:58:23 GMT

radmanmm,

Thanks for the great work. I've got this working 99%. I am able to log in using the email address instead of the custom user name.

Two questions though regarding this section of code...

protected void CreateUserWizard1_CreatingUser(object sender, LoginCancelEventArgs e) {

CreateUserWizard1.UserName = this.firstName.Text + "." + this.lastName.Text + "." + Guid.NewGuid().ToString();

}

1) I get the following error with the above code when compiling

'Register' does not contain a definition for 'firstName'

I can compile by replacing it with the following line...

CreateUserWizard1.UserName =Guid.NewGuid().ToString();

Which is fine because the UserName can simply be a Guid. But the real problem is that this code is never reached anyway. For debugging I put a breakpoint at this line. And my app never stops at this point while debugging.

If the UserName field is visible on the registration page the registration is successful. However the username is set to whatever the user typed in. If I set the visible property of the UserName textbox control to "false" hoping to set this value in the CreateUserWizard1_CreatingUser event my registration is unsuccessful and I get the following error message

Your account was not created. Please try again.

I'm sure I'm missing something easy here. But why doesn't CreateUserWizard1_CreatingUser fire like I expect?