C#® Developer's Guide to ASP.NET, XML, and ADO.NET

Chapter 7. Security

IN THIS CHAPTER

• Identity and Principal

• Windows Authentication

• Forms Authentication

• Passport Authentication

• File Authorization

• URL Authorization

• Custom Roles with Forms Authentication

• Pulling It All Together

• Impersonation

• Class Reference

ASP.NET offers a number of ways to secure your Web application. Securing a Web application usually breaks down to two tasks: authentication and authorization.

Authentication is the process of determining who the user is. This is frequently done by requiring users to first indicate who they are by providing a name or e-mail address. Second, users are frequently required to provide some shared secret, which theoretically only they know. The most common example of a shared secret is a password. The combination ...