Authorization forms

For work of authorization on a site it is necessary to set up forms taking part in authorization and mail templates. You can also use specialized controls on a site, which allow displaying current user name, links to login form, form for editing personal user data…

Forms

For work of authorization you need the following forms:

Change password form - form to change password by the user.

Password recovery form - form for the user can restore his lost password (receiving it by e-mail).

User data wizard - form, where the user can input or edit his personal data.

User data page - page, where the user’s data is shown.

Controls

To make creating of authentication mechanism on a site easier you can use specialized CMS controls that will allow you to extend the features of your site considerably:

CmsLoginName - the control displays the a user name on a site page;

CmsLoginStatus - the control detects the user's authentication state and toggles the state of a link to log in or log out of a Web site.

CmsLoginView - the control displays the appropriate content template for a given user, based on the user's authentication status and role membership.

CmsUserEditButton - provides user interface elements that transit to the current user's data editing form.

You can use these controls in any place on site.

Web.config settings

For authorization support it is used specialized CMS providers: CmsMembershipProvider, CmsProfileProvider, CmsRoleProvider. All providers have the ApplicationName property equal to the site key and you can not redefine it. You must config the providers in the site's web.config file

CmsUserProfile class is a typified user’s profile with a set of predefined properties.

Also you need define loginUrl attribute in forms tag of authentication section of the web.config.

See sample:

<authentication mode="Forms">
    <forms
        loginUrl="~/?type=authorization&key=login"
        protection="All"
        slidingExpiration="true"
        timeout="43200" />
    <!--43200 minutes is approx 30 days-->
</authentication>

See Also

General: CMS architecture

Site configuration: Site configuration | Provider configuration