Structure of
the web:
SAMembershipProvider.cs
namespace User.Membership
{
public class SAMembershipProvider : MembershipProvider
{
#region - Properties -
private int NewPasswordLength { get; set; }
private string ConnectionString { get; set; }
//private MachineKeySection MachineKey { get; set; } //Used when determining encryption key values.
public bool enablePasswordReset { get; set; }
public bool enablePasswordRetrieval { get; set; }
public bool requiresQuestionAndAnswer { get; set; }
public bool requiresUniqueEmail { get; set; }
public int maxInvalidPasswordAttempts { get; set; }
public int passwordAttemptWindow { get; set; }
public MembershipPasswordFormat passwordFormat { get; set; }
public int minRequiredNonAlphanumericCharacters { get; set; }
public int minRequiredPasswordLength { get; set; }
public string passwordStrengthRegularExpression { get; set; }
public override string ApplicationName { get; set; }
// Indicates whether passwords can be retrieved using
the provider's GetPassword method.
// This property is read-only.
public override bool EnablePasswordRetrieval
{
get { return enablePasswordRetrieval; }
}
// Indicates whether passwords can be reset using
the provider's ResetPassword method.
// This property is read-only.
public override bool EnablePasswordReset
{
get { return enablePasswordReset; }
}
// Indicates whether a password answer must be supplied when calling
the provider's GetPassword and ResetPassword methods.
// This property is read-only.
public override bool RequiresQuestionAndAnswer
{
get { return requiresQuestionAndAnswer; }
}
public override int MaxInvalidPasswordAttempts
{
get { return maxInvalidPasswordAttempts; }
}
// For a description, see MaxInvalidPasswordAttempts.
// This property is read-only.
public override int PasswordAttemptWindow
{
get { return passwordAttemptWindow; }
}
// Indicates whether each registered user must have a unique e-mail address.
// This property is read-only.
public override bool RequiresUniqueEmail
{
get { return requiresUniqueEmail; }
}
public override MembershipPasswordFormat PasswordFormat
{
get { return passwordFormat; }
}
//
The minimum number of characters required in a password.
// This property is read-only.
public override int MinRequiredPasswordLength
{
get { return minRequiredPasswordLength; }
}
//
The minimum number of non-alphanumeric characters required in a password.
// This property is read-only.
public override int MinRequiredNonAlphanumericCharacters
{
get { return minRequiredNonAlphanumericCharacters; }
}
// A regular expression specifying a pattern to which passwords must conform.
// This property is read-only.
public override string PasswordStrengthRegularExpression
{
get { return passwordStrengthRegularExpression; }
}
#endregion
#region - Methods -
public override void Initialize(string name, NameValueCollection config)
{
throw new NotImplementedException();
}
public override bool ChangePassword(string username, string oldPassword, string newPassword)
{
throw new NotImplementedException();
}
public override bool ChangePasswordQuestionAndAnswer(string username, string password, string newPasswordQuestion, string newPasswordAnswer)
{
throw new NotImplementedException();
}
// Takes, as input, a user name, password, e-mail address, and other information and adds a new user
// to
the membership data source. CreateUser returns a MembershipUser object representing
the newly
// created user. It also accepts an out parameter (in Visual Basic, ByRef) that returns a
// MembershipCreateStatus value indicating whether
the user was successfully created or, if
the user
// was not created,
the reason why. If
the user was not created, CreateUser returns null.
// Before creating a new user, CreateUser calls
the provider's virtual OnValidatingPassword method to
// validate
the supplied password. It then creates
the user or cancels
the action based on
the outcome of
the call.
public override MembershipUser CreateUser(string username, string password, string email, string passwordQuestion, string passwordAnswer, bool isApproved, object providerUserKey, out MembershipCreateStatus status)
{
throw new NotImplementedException();
}
public override bool DeleteUser(string username, bool deleteAllRelatedData)
{
throw new NotImplementedException();
}
public override MembershipUserCollection FindUsersByEmail(string emailToMatch, int pageIndex, int pageSize, out int totalRecords)
{
throw new NotImplementedException();
}
// Returns a MembershipUserCollection containing MembershipUser objects representing users whose user names
// match
the usernameToMatch input parameter. Wildcard syntax is data source-dependent. MembershipUser objects
// in
the MembershipUserCollection are sorted by user name. If FindUsersByName finds no matching users, it
// returns an empty MembershipUserCollection.
// For an explanation of
the pageIndex, pageSize, and totalRecords parameters, see
the GetAllUsers method.
public override MembershipUserCollection FindUsersByName(string usernameToMatch, int pageIndex, int pageSize, out int totalRecords)
{
throw new NotImplementedException();
}
// Returns a MembershipUserCollection containing MembershipUser objects representing all registered users. If
// there are no registered users, GetAllUsers returns an empty MembershipUserCollection
//
The results returned by GetAllUsers are constrained by
the pageIndex and pageSize input parameters. pageSize
// specifies
the maximum number of MembershipUser objects to return. pageIndex identifies which page of results
// to return. Page indexes are 0-based.
//
// GetAllUsers also takes an out parameter (in Visual Basic, ByRef) named totalRecords that, on return, holds
// a count of all registered users.
public override MembershipUserCollection GetAllUsers(int pageIndex, int pageSize, out int totalRecords)
{
throw new NotImplementedException();
}
// Returns a count of users that are currently online-that is, whose LastActivityDate is greater than
the current
// date and time minus
the value of
the membership service's UserIsOnlineTimeWindow property, which can be
read
// from Membership.UserIsOnlineTimeWindow. UserIsOnlineTimeWindow specifies a time in minutes and is set using
//
the <membership> element's userIsOnlineTimeWindow attribute.
public override int GetNumberOfUsersOnline()
{
throw new NotImplementedException();
}
// Takes, as input, a user name and a password answer and returns that user's password. If
the user name is not
// valid, GetPassword throws a ProviderException.
// Before retrieving a password, GetPassword verifies that EnablePasswordRetrieval is true. If
// EnablePasswordRetrieval is false, GetPassword throws a NotSupportedException. If EnablePasswordRetrieval is
// true but
the password format is hashed, GetPassword throws a ProviderException since hashed passwords cannot,
// by definition, be retrieved. A membership provider should also throw a ProviderException from Initialize if
// EnablePasswordRetrieval is true but
the password format is hashed.
//
// GetPassword also checks
the value of
the RequiresQuestionAndAnswer property before retrieving a password. If
// RequiresQuestionAndAnswer is true, GetPassword compares
the supplied password answer to
the stored password
// answer and throws a MembershipPasswordException if
the two don't match. GetPassword also throws a
// MembershipPasswordException if
the user whose password is being retrieved is currently locked out.
public override string GetPassword(string username, string answer)
{
throw new NotImplementedException();
}
// Takes, as input, a user name or user ID (the method is overloaded) and a Boolean value indicating whether
// to update
the user's LastActivityDate to show that
the user is currently online. GetUser returns a MembershipUser
// object representing
the specified user. If
the user name or user ID is invalid (that is, if it doesn't represent
// a registered user) GetUser returns null (Nothing in Visual Basic).
public override MembershipUser GetUser(object providerUserKey, bool userIsOnline)
{
throw new NotImplementedException();
}
// Takes, as input, a user name or user ID (the method is overloaded) and a Boolean value indicating whether to
// update
the user's LastActivityDate to show that
the user is currently online. GetUser returns a MembershipUser
// object representing
the specified user. If
the user name or user ID is invalid (that is, if it doesn't represent
// a registered user) GetUser returns null (Nothing in Visual Basic).
public override MembershipUser GetUser(string username, bool userIsOnline)
{
throw new NotImplementedException();
}
// Takes, as input, an e-mail address and returns
the first registered user name whose e-mail address matches
the
// one supplied.
// If it doesn't find a user with a matching e-mail address, GetUserNameByEmail returns an empty string.
public override string GetUserNameByEmail(string email)
{
throw new NotImplementedException();
}
// Virtual method called when a password is created.
The default implementation in MembershipProvider fires a
// ValidatingPassword event, so be sure to call
the base class's OnValidatingPassword method if you override
// this method.
The ValidatingPassword event allows applications to apply additional tests to passwords by
// registering event handlers.
// A custom provider's CreateUser, ChangePassword, and ResetPassword methods (in short, all methods that record
// new passwords) should call this method.
protected override void OnValidatingPassword(ValidatePasswordEventArgs e)
{
base.OnValidatingPassword(e);
}
// Takes, as input, a user name and a password answer and replaces
the user's current password with a new, random
// password. ResetPassword then returns
the new password. A convenient mechanism for generating a random password
// is
the Membership.GeneratePassword method.
// If
the user name is not valid, ResetPassword throws a ProviderException. ResetPassword also checks
the value of
//
the RequiresQuestionAndAnswer property before resetting a password. If RequiresQuestionAndAnswer is true,
// ResetPassword compares
the supplied password answer to
the stored password answer and throws a
// MembershipPasswordException if
the two don't match.
//
// Before resetting a password, ResetPassword verifies that EnablePasswordReset is true. If EnablePasswordReset is
// false, ResetPassword throws a NotSupportedException. If
the user whose password is being changed is currently
// locked out, ResetPassword throws a MembershipPasswordException.
//
// Before resetting a password, ResetPassword calls
the provider's virtual OnValidatingPassword method to validate
//
the new password. It then resets
the password or cancels
the action based on
the outcome of
the call. If
the new
// password is invalid, ResetPassword throws a ProviderException.
//
// Following a successful password reset, ResetPassword updates
the user's LastPasswordChangedDate.
public override string ResetPassword(string username, string answer)
{
throw new NotImplementedException();
}
// Unlocks (that is, restores login privileges for)
the specified user. UnlockUser returns true if
the user is
// successfully unlocked. Otherwise, it returns false. If
the user is already unlocked, UnlockUser simply returns true.
public override bool UnlockUser(string userName)
{
throw new NotImplementedException();
}
// Takes, as input, a MembershipUser object representing a registered user and updates
the information stored for
// that user in
the membership data source. If any of
the input submitted in
the MembershipUser object is not valid,
// UpdateUser throws a ProviderException.
// Note that UpdateUser is not obligated to allow all
the data that can be encapsulated in a MembershipUser object to
// be updated in
the data source.
public override void UpdateUser(MembershipUser user)
{
throw new NotImplementedException();
}
// Takes, as input, a user name and a password and verifies that they are valid-that is, that
the membership data
// source contains a matching user name and password. ValidateUser returns true if
the user name and password are
// valid, if
the user is approved (that is, if MembershipUser.IsApproved is true), and if
the user isn't currently
// locked out. Otherwise, it returns false.
// Following a successful validation, ValidateUser updates
the user's LastLoginDate and fires an
// AuditMembershipAuthenticationSuccess Web event. Following a failed validation, it fires an
//
// AuditMembershipAuthenticationFailure Web event.
public override bool ValidateUser(string username, string password)
{
throw new NotImplementedException();
//if (string.IsNullOrEmpty(password.Trim())) return false;
//string hash = EncryptPassword(password);
//User user = _repository.GetByUserName(username);
//if (user == null) return false;
//if (user.Password == hash)
//{
// User = user;
// return true;
//}
//return false;
}
#endregion
/// <summary>
/// Procuses an MD5 hash string of
the password
/// </summary>
/// <param name="password">password to hash</param>
/// <returns>MD5 Hash string</returns>
protected string EncryptPassword(string password)
{
//we use codepage 1252 because that is what sql server uses
byte[] pwdBytes = Encoding.GetEncoding(1252).GetBytes(password);
byte[] hashBytes = System.Security.Cryptography.MD5.Create().ComputeHash(pwdBytes);
return Encoding.GetEncoding(1252).GetString(hashBytes);
}
} // End Class
}
SARoleProvider.cs
namespace User.Membership
{
public class SARoleProvider : RoleProvider
{
#region - Properties -
//
The name of
the application using
the role provider. ApplicationName is used to scope
// role data so that applications can choose whether to share role data with other applications.
// This property can be
read and written.
public override string ApplicationName { get; set; }
#endregion
#region - Methods -
public override void Initialize(string name, NameValueCollection config)
{
throw new NotImplementedException();
}
// Takes, as input, a list of user names and a list of role names and adds
the specified users to
//
the specified roles.
// AddUsersToRoles throws a ProviderException if any of
the user names or role names do not exist.
// If any user name or role name is null (Nothing in Visual Basic), AddUsersToRoles throws an
// ArgumentNullException. If any user name or role name is an empty string, AddUsersToRoles throws
// an ArgumentException.
public override void AddUsersToRoles(string[] usernames, string[] roleNames)
{
throw new NotImplementedException();
}
// Takes, as input, a role name and creates
the specified role.
// CreateRole throws a ProviderException if
the role already exists,
the role name contains a comma,
// or
the role name exceeds
the maximum length allowed by
the data source.
public override void CreateRole(string roleName)
{
throw new NotImplementedException();
}
// Takes, as input, a role name and a Boolean value that indicates whether to throw an exception if there
// are users currently associated with
the role, and then deletes
the specified role.
// If
the throwOnPopulatedRole input parameter is true and
the specified role has one or more members,
// DeleteRole throws a ProviderException and does not delete
the role. If throwOnPopulatedRole is false,
// DeleteRole deletes
the role whether it is empty or not.
//
// When DeleteRole deletes a role and there are users assigned to that role, it also removes users from
the role.
public override bool DeleteRole(string roleName, bool throwOnPopulatedRole)
{
throw new NotImplementedException();
}
// Takes, as input, a search pattern and a role name and returns a list of users belonging to
the specified role
// whose user names match
the pattern. Wildcard syntax is data-source-dependent and may vary from provider to
// provider. User names are returned in alphabetical order.
// If
the search finds no matches, FindUsersInRole returns an empty string array (a string array with no elements).
// If
the role does not exist, FindUsersInRole throws a ProviderException.
public override string[] FindUsersInRole(string roleName, string usernameToMatch)
{
throw new NotImplementedException();
}
// Returns
the names of all existing roles. If no roles exist, GetAllRoles returns an empty string array (a string
// array with no elements).
public override string[] GetAllRoles()
{
throw new NotImplementedException();
}
// Takes, as input, a user name and returns
the names of
the roles to which
the user belongs.
// If
the user is not assigned to any roles, GetRolesForUser returns an empty string array
// (a string array with no elements). If
the user name does not exist, GetRolesForUser throws a
// ProviderException.
public override string[] GetRolesForUser(string username)
{
throw new NotImplementedException();
//User user = _repository.GetByUserName(username);
//string[] roles = new string[user.Role.Rights.Count + 1];
//roles[0] = user.Role.Description;
//int idx = 0;
//foreach (Right right in user.Role.Rights)
// roles[++idx] = right.Description;
//return roles;
}
public override string[] GetUsersInRole(string roleName)
{
throw new NotImplementedException();
}
// Takes, as input, a role name and returns
the names of all users assigned to that role.
// If no users are associated with
the specified role, GetUserInRole returns an empty string array (a string array with
// no elements). If
the role does not exist, GetUsersInRole throws a ProviderException.
public override bool IsUserInRole(string username, string roleName)
{
throw new NotImplementedException();
//User user = _repository.GetByUserName(username);
//if (user != null)
// return user.IsInRole(roleName);
//else
// return false;
}
// Takes, as input, a list of user names and a list of role names and removes
the specified users from
the specified roles.
// RemoveUsersFromRoles throws a ProviderException if any of
the users or roles do not exist, or if any user specified
// in
the call does not belong to
the role from which he or she is being removed.
public override void RemoveUsersFromRoles(string[] usernames, string[] roleNames)
{
throw new NotImplementedException();
}
// Takes, as input, a role name and determines whether
the role exists.
public override bool RoleExists(string roleName)
{
throw new NotImplementedException();
}
#endregion
} // End Class
}
From Web.config:
<membership defaultProvider="SAMembershipProvider" userIsOnlineTimeWindow="15">
<providers>
<clear/>
<add name="SAMembershipProvider" type="User.Membership.SAMembershipProvider, User" />
</providers>
</membership>
<roleManager defaultProvider="SARoleProvider" enabled="true" cacheRolesInCookie="true">
<providers>
<clear/>
<add name="SARoleProvider" type="User.Membership.SARoleProvider" />
</providers>
</roleManager>
When running project, I get following error:
Server Error in '/' Application.
Configuration Error
Description: An error occurred during
the processing of a configuration file required to service this request. Please review
the specific error details below and modify your configuration file appropriately.
Parser Error Message:
The method or operation is not implemented.
Source Error:
Line 71: <providers>
Line 72: <clear/>
Line 73: <add name="SARoleProvider" type="User.Membership.SARoleProvider" />
Line 74: </providers>
Line 75: </roleManager>
I tried:
<add name="SARoleProvider" type="User.Membership.SARoleProvider, User" />
and
<add name="SARoleProvider" type="User.Membership.SARoleProvider, SARoleProvider" />
and
<add name="SARoleProvider" type="User.Membership.SARoleProvider, User.Membership" />
but none works
Any idea what's wrong here?
Thanks,
Ile
