silverlight - ASP.NET identity vs FormsAuthetication -


we have asp.net ( silverlight) lob web application developed using .net 4. have rid of current authentication mechanism , implement new one. think have 2 options here:

1> forms authentication using membership provider ( available in .net 4)
2> asp.net identity ( not available in .net 4. have update target framework 4.5 or latter)

i have gone through article here describes difference between these 2 , based on understanding 2 major differences are:
1> can configured identity framework use social credentials.
2> identity framework code can unit tested.

we have lob application. likelihood of allowing users use social credential login our application very less. looking suggestion whether worthwhile spend time , implement identity framework authentication. (note identity framework have convert target framework of projects 4.5). advantage see here unit testing.

updating later framework not problem. going way causes problem, won't have code changes if go 4 4.5. or rather 4.5.1 latest in 4.5.x.

if architecture advantage not advantage you, security must be. identity uses pbkdf2 hmac-sha256 password hashing. not available in membershipprovider comes sha1 default hashing not considered secure @ in 2016

otherwise enjoy working identity framework - lot easier things rather monstrous membershipprovider. things took me few hours implement in identity took weeks membershiprovider. speed of development consideration.

also membershipprovider not getting new versions, why want use old framework when new shiny supported framework available?


Comments

Popular posts from this blog

Delphi XE2 Indy10 udp client-server interchange using SendBuffer-ReceiveBuffer -

Qt ActiveX WMI QAxBase::dynamicCallHelper: ItemIndex(int): No such property in -

Enable autocomplete or intellisense in Atom editor for PHP -