Pour en savoir ASP.NET MVC, nous construisons une application Internet.
Partie VIII: Ajout de sécurité.
MVC Application Security
Le dossier Modèles contient les classes qui représentent le modèle d'application.
Visual Web Developer crée automatiquement un fichier AccountModels.cs qui contient les modèles pour l' authentification de l' application.
AccountModels contient un LogOnModel, un ChangePasswordModel et un RegisterModel:
Le modèle de changement de mot de passe
public class ChangePasswordModel
{
[Required]
[ DataType(DataType.Password) ]
[ Display(Name = "Current password") ]
public string OldPassword { get;
set; }
[Required]
[ StringLength(100, ErrorMessage = "The {0}
must be at least {2} characters long.",
MinimumLength = 6) ]
[ DataType(DataType.Password) ]
[ Display(Name =
"New password") ]
public string NewPassword { get; set; }
[ DataType(DataType.Password) ]
[ Display(Name = "Confirm new password") ]
[ Compare("NewPassword",
ErrorMessage = "The new password and confirmation password do not
match.") ]
public string ConfirmPassword { get; set; }
}
Le modèle d'ouverture de session
public class LogOnModel
{
[Required]
[ Display(Name = "User
name") ]
public string UserName { get; set; }
[Required]
[ DataType(DataType.Password) ]
[ Display(Name = "Password") ]
public string Password { get; set; }
[ Display(Name = "Remember me?") ]
public bool RememberMe { get;
set; }
}
Le registre modèle
public class RegisterModel
{
[Required]
[ Display(Name =
"User name") ]
public string UserName { get; set; }
[Required]
[ DataType(DataType.EmailAddress) ]
[ Display(Name = "Email address") ]
public string Email { get; set; }
[Required]
[ StringLength(100,
ErrorMessage = "The {0} must be at least {2} characters long." ,
MinimumLength = 6) ]
[ DataType(DataType.Password) ]
[ Display(Name =
"Password") ]
public string Password { get; set; }
[ DataType(DataType.Password) ]
[ Display(Name = "Confirm password") ]
[ Compare("Password",
ErrorMessage = "The password and confirmation password do not match.") ]
public string ConfirmPassword { get; set; }
}