Building Secure ASP.NET Applications - People Search Directory

364
How To: Use Forms Authentication with Active Directory
// Add the cookie to the outgoing cookies collection.
Response.Cookies.Add(authCookie);
// Redirect the user to the originally requested page
Response.Redirect(
FormsAuthentication.GetRedirectUrl(txtUserName.Text,
false));
}
else
{
lblError.Text =
"Authentication failed, check username and password.";
}
}
catch(Exception ex)
{
lblError.Text = "Error authenticating. " + ex.Message;
}
6. Implement an Authentication Request Handler to Construct
a GenericPrincipal Object
This procedure implements the Application_AuthenticateRequest event handler
within global.asax and creates a GenericPrincipal object for the currently authenticated
user. This will contain the list of groups that the user is a member of, retrieved
from the FormsAuthenticationTicket contained in the authentication cookie.
Finally, you will associate the GenericPrincipal object with the current HttpContext
object that is created for each Web request.
To implement an authentication request handler to construct a GenericPricipal object
1. Use Solution Explorer to open global.asax.cs.
2. Add the following using statements to the top of the file.
using System.Web.Security;
using System.Security.Principal;
3. Locate the Application_AuthenticateRequest event handler and add the following
code to obtain the cookie that contains the encrypted
FormsAuthenticationTicket, from the cookie collection passed with the request.
// Extract the forms authentication cookie
string cookieName = FormsAuthentication.FormsCookieName;
HttpCookie authCookie = Context.Request.Cookies[cookieName];
if(null == authCookie)
{