Custom Membership Providers

Code: http://www.codeproject.com/KB/aspnet/CustomMembershipProviders.aspx

Video: http://www.asp.net/general/videos/how-do-i-create-a-custom-membership-provider

Implementing a Membership Provider http://msdn.microsoft.com/en-us/library/f1kyba5e.aspx

Implementing a Role Provider: http://msdn.microsoft.com/en-us/library/8fw7xh74.aspx

Let's start:

Step 1: Create a class inherits MembershipProvider

Step 2: Add Compulsory variables/property 

Step 3: Implement Core methods

Initialize method: get attribute from web.config

CreateUser method: validation, insert into custom data source and return a MembershipUser

ValidateUser method:  

ResetPassword method:

others : GetXX/UpateXX...

Step 4: Configuration

<membership>  <providers>    <clear/>    <add name="AspNetSqlMembershipProvider"         type="System.Web.Security.SqlMembershipProvider"         connectionStringName="ApplicationServices"        enablePasswordRetrieval="false"         enablePasswordReset="true"         requiresQuestionAndAnswer="false"         requiresUniqueEmail="false"        maxInvalidPasswordAttempts="5"         minRequiredPasswordLength="6"         minRequiredNonalphanumericCharacters="0"         passwordAttemptWindow="10"        applicationName="/" />  </providers></membership>

Note: use machine key to encryption and decryption some important data

Generate a machine key: http://aspnetresources.com/tools/machineKey

How to utilize machine key:

http://www.rich-rogers.com/blog/archive/asp.net-c-sharp-encrypt-hash-using-machinekey-values

http://msdn.microsoft.com/en-us/library/dtkwfdky.aspx

using System.Text;using System.Web.Security;namespace MyLibrary{    internal static class Crypto    {        internal static string Encrypt(string text)        {            if (!string.IsNullOrEmpty(text))            {                return MachineKey.Encode(Encoding.Unicode.GetBytes(text),                                         MachineKeyProtection.All);            }            else            {                return null;            }        }        internal static string Decrypt(string text)        {            if (!string.IsNullOrEmpty(text))            {                return Encoding.Unicode.GetString(MachineKey.Decode(text,                                             MachineKeyProtection.All));            }            else            {                return null;            }        }    }}