Added admin page with authentication.

Author: 1996dylanriley

SimpleBlog/App_Start/RouteConfig.cs

@@ -19,6 +19,7 @@ public static void RegisterRoutes(RouteCollection routes)
             routes.IgnoreRoute("{resource}.axd/{*pathInfo}");
 
             routes.MapRoute("Login", "login", new { Controller = "Auth", Action = "login" }, namespaces);
+            routes.MapRoute("Logout", "logout", new { Controller = "Auth", Action = "Logout" }, namespaces);
 
             routes.MapRoute("Home", "", new {Controller = "Posts", Action = "Index"}, namespaces );
         }

SimpleBlog/Areas/Admin/Controllers/PostsController.cs

@@ -6,6 +6,7 @@
 
 namespace SimpleBlog.Areas.Admin.Controllers
 {
+    [Authorize(Roles = "admin")] // This tell mvc that you cannot access this page if you are not logged in or your role isn't allow
     public class PostsController : Controller
     {
         // GET: Admin/Posts

SimpleBlog/Areas/Admin/Controllers/UsersController.cs

@@ -6,8 +6,10 @@
 
 namespace SimpleBlog.Areas.Admin.Controllers
 {
+    [Authorize(Roles = "admin")]
     public class UsersController : Controller
     {
+
         // GET: Admin/Users
         public ActionResult Index()
         {

SimpleBlog/Controllers/AuthController.cs

@@ -3,31 +3,37 @@
 using System.Linq;
 using System.Web;
 using System.Web.Mvc;
+using System.Web.Security;
 using SimpleBlog.ViewModels;
 
 namespace SimpleBlog.Controllers
 {
     public class AuthController : Controller
+
     {
+        public ActionResult Logout()
+        {
+            FormsAuthentication.SignOut();
+            return RedirectToRoute("home");
+        }
         // GET: Auth
         public ActionResult Login()
         {
             return View(new AuthLogin { });
         }
 
         [HttpPost]
-        public ActionResult Login(AuthLogin form)
+        public ActionResult Login(AuthLogin form, string returnUrl) // the string returnUrl redirects the user to where they want to go if they sign in successfully.
         {
             if (!ModelState.IsValid) //This tells mvc what to do if the required fields in the model(auth.cs) are invalid.
             return View(form); // the form parameter here means retrun the form as it was submitted(the post request).
 
-            if (form.UserName != "dylan riley")
-            {
-                ModelState.AddModelError("UserName", "Your username proves to me that you are not a boss!");
-                return View(form);
-            }
+            FormsAuthentication.SetAuthCookie(form.Username, true);
+
+            if (!string.IsNullOrWhiteSpace(returnUrl))
+                return Redirect(returnUrl);
 
-            return Content("The form is valid");
+            return RedirectToRoute("home");
         }
     }
 }

SimpleBlog/Controllers/PostsController.cs

@@ -8,6 +8,7 @@ namespace SimpleBlog.Controllers
 {
     public class PostsController : Controller
     {
+        
         public ActionResult Index()
         {
             return View();

SimpleBlog/Infrastructure/RoleProvider.cs

@@ -0,0 +1,77 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Web;
+
+namespace SimpleBlog.Infrastructure
+{
+    public class RoleProvider : System.Web.Security.RoleProvider
+
+    {
+        public override string ApplicationName
+        {
+            get
+            {
+                throw new NotImplementedException();
+            }
+
+            set
+            {
+                throw new NotImplementedException();
+            }
+        }
+
+        public override void AddUsersToRoles(string[] usernames, string[] roleNames)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override void CreateRole(string roleName)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override bool DeleteRole(string roleName, bool throwOnPopulatedRole)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override string[] FindUsersInRole(string roleName, string usernameToMatch)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override string[] GetAllRoles()
+        {
+            throw new NotImplementedException();
+        }
+
+        public override string[] GetRolesForUser(string username)
+        {
+            if (username == "dylan")
+                return new[] { "admin" };
+
+            return new string[] {};
+        }
+
+        public override string[] GetUsersInRole(string roleName)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override bool IsUserInRole(string username, string roleName)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override void RemoveUsersFromRoles(string[] usernames, string[] roleNames)
+        {
+            throw new NotImplementedException();
+        }
+
+        public override bool RoleExists(string roleName)
+        {
+            throw new NotImplementedException();
+        }
+    }
+}

SimpleBlog/SimpleBlog.csproj

@@ -152,6 +152,7 @@
     <Compile Include="Global.asax.cs">
       <DependentUpon>Global.asax</DependentUpon>
     </Compile>
+    <Compile Include="Infrastructure\RoleProvider.cs" />
     <Compile Include="Properties\AssemblyInfo.cs" />
     <Compile Include="ViewModels\Auth.cs" />
   </ItemGroup>

SimpleBlog/ViewModels/Auth.cs

@@ -5,7 +5,7 @@ namespace SimpleBlog.ViewModels
     public class AuthLogin
     {
         [Required] // this is another annotation
-        public string UserName { get; set; }
+        public string Username { get; set; }
 
 
         [Required, DataType(DataType.Password)] // this here is how we tell the view that the html.EditorFor contains password data. This is called

SimpleBlog/Views/Auth/Login.cshtml

@@ -6,13 +6,13 @@
 {
     @Html.ValidationSummary() // this here is a really cool feature that return a deafault message if a feild isn't valid.
                             <div>
-                                @Html.LabelFor(x => x.UserName)
-                                @Html.EditorFor(x => x.UserName) <!-- As this is a strongly typed view I can use the -->
+                                @Html.LabelFor(x => x.Username)
+                                @Html.EditorFor(x => x.Username) <!-- As this is a strongly typed view I can use the -->
                                 <!--name username to associate it with the property by the same name in the view model-->
                             </div>
                             <div>
                                 @Html.LabelFor(x => x.Password)
-                               <!--- <label>@:Model.Password</label> ->
+                               <!--- <label>(at sign goes here)Model.Password</label> -->
 
                                 @Html.EditorFor(x => x.Password)
                             </div>

SimpleBlog/Views/Shared/_Layout.cshtml

@@ -11,8 +11,23 @@
 </head>
 <body>
     <div>
-        <header><h1><a href="@Url.RouteUrl("home")">Simple blog</a></h1></header>
-        <a href="@Url.RouteUrl("login")">login</a>
+        <header>
+            <h1><a href="@Url.RouteUrl("home")">Simple blog</a></h1>
+            @if (User.Identity.IsAuthenticated)
+            {
+                <p> Welcome Back @User.Identity.Name</p>
+                <a href="@Url.RouteUrl("logout")">Logout</a>
+                if(User.IsInRole("admin"))
+                {
+                    <a href="@Url.Action("index", "Posts", new { area = "admin"})">View posts in admin</a> <!-- the reason i put new {area = "admin"} is because the overload requires an object-->
+               }
+            }
+            else
+            {
+            <a href="@Url.RouteUrl("login")">login</a>
+            }
+           
+        </header>
         @RenderBody()
 
     </div>