Professional DNN7: Open Source .NET CMS Platform

Membership Security

WHAT YOU WILL LEARN IN THIS CHAPTER

• Creating a membership provider
• Creating authentication providers
• Managing membership security

WROX.COM CODE DOWNLOADS FOR THIS CHAPTER

The wrox.com code downloads for this chapter are found at www.wiley.com/go/prodnn7 on the Download Code tab. The code is in the Chapter 9 download and individually named according to the names throughout the chapter.

DNN has a mature, robust membership-management system that has worked well for many years and supported many use cases and extension scenarios. However, as with all code, time moves on and new requirements surface that the existing codebase struggles to support. From a security perspective, this is particularly critical, with changes in the security landscape necessitating changes in DNN's membership system. These changes led to a large-scale review of the Membership Security surface in DNN and the 7.1.0 release, which resulted in considerable change. In this chapter, you'll look at the most common extension scenarios as well as the recent changes in the Membership Security model.

DNN MEMBERSHIP OVERVIEW

Since its inception as the IBuySpy site, DNN has contained rich member, role, and profile support. In the earliest days this involved its own API, custom tables, and stored procedures. However, when Microsoft announced their intention to introduce its own controls, SQL Server entities, ...