Configuring Identity to your existing project is not hard thing. You must install some NuGet package and do some small configuration.
First install these NuGet packages in Package Manager Console:
PM> Install-Package Microsoft.AspNet.Identity.Owin PM> Install-Package Microsoft.AspNet.Identity.EntityFrameworkPM> Install-Package Microsoft.Owin.Host.SystemWeb
Add a user class and with IdentityUser
inheritance:
public class AppUser : IdentityUser{ //add your custom properties which have not included in IdentityUser before public string MyExtraProperty { get; set; } }
Do same thing for role:
public class AppRole : IdentityRole{ public AppRole() : base() { } public AppRole(string name) : base(name) { } // extra properties here }
Change your DbContext
parent form DbContext
to IdentityDbContext<AppUser>
like this:
public class MyDbContext : IdentityDbContext{ // Other part of codes still same // You don't need to add AppUser and AppRole // since automatically added by inheriting form IdentityDbContext }
If you use same connection string and enabled migration EF create necessary tables for you.
Optionally you could extent UserManager
to add your desired configuration and customization:
public class AppUserManager : UserManager{ public AppUserManager(IUserStore store) : base(store) { } // this method is called by Owin therefore best place to configure your User Manager public static AppUserManager Create( IdentityFactoryOptions options, IOwinContext context) { var manager = new AppUserManager( new UserStore (context.Get ())); // optionally configure your manager // ... return manager; }}
Since Identity is based on OWIN you need configure OWIN too:
Add a class to App_Start
folder (or anywhere else if you want). This class is used by OWIN
namespace MyAppNamespace{ public class IdentityConfig { public void Configuration(IAppBuilder app) { app.CreatePerOwinContext(() => new MyDbContext()); app.CreatePerOwinContext(AppUserManager.Create); app.CreatePerOwinContext >((options, context) => new RoleManager ( new RoleStore (context.Get ()))); app.UseCookieAuthentication(new CookieAuthenticationOptions { AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie, LoginPath = new PathString("/Home/Login"), }); } }}
Almost done just add this line of code to your web.config
file so OWIN could find your startup class.
Now in entire project you could use Identity just like new project had already installed by VS. Consider login action for example
[HttpPost]public ActionResult Login(LoginViewModel login){ if (ModelState.IsValid) { var userManager = HttpContext.GetOwinContext().GetUserManager(); var authManager = HttpContext.GetOwinContext().Authentication; AppUser user = userManager.Find(login.UserName, login.Password); if (user != null) { var ident = userManager.CreateIdentity(user, DefaultAuthenticationTypes.ApplicationCookie); AuthManager.SignIn( new AuthenticationProperties { IsPersistent = false }, ident); return Redirect(login.ReturnUrl ?? Url.Action("Index", "Home")); } } ModelState.AddModelError("", "Invalid username or password"); return View(login);}
You could make roles and add to your users:
public ActionResult CreateRole(string roleName){ var roleManager=HttpContext.GetOwinContext().GetUserManager>(); if (!roleManager.RoleExists(roleName)) roleManager.Create(new AppRole(roleName)); // rest of code}
You could add any role to any user like this:
UserManager.AddToRole(UserManager.FindByName("username").Id, "roleName");
By using Authorize
you could guard your actions or controllers:
[Authorize]public ActionResult MySecretAction() {}
or
[Authorize(Roles = "Admin")]]public ActionResult MySecretAction() {}
Also you could install additional package and configure them to meet your requirement like Microsoft.Owin.Security.Facebook
or whichever you want.
Note: Don't forget add relevant namespaces to your files:
using Microsoft.AspNet.Identity;using Microsoft.Owin.Security;using Microsoft.AspNet.Identity.Owin;using Microsoft.AspNet.Identity.EntityFramework;using Microsoft.Owin;using Microsoft.Owin.Security.Cookies;using Owin;
You could also see my other answers like and for advanced use of Identity.