MvcMembership Work Item Rss Feed

Closed Issue: Accessing LastActivityDate throws exception when using ActiveDirectoryMembershipProvider. [4054]

TroyGoode — Fri, 02 Nov 2012 13:20:47 GMT

Any attempt to read or write to/from the LastActivityDate property will throw a NotSupportedException...
 
http://msdn.microsoft.com/en-us/library/system.web.security.activedirectorymembershipuser%28VS.85%29.aspx
 
(As reported by robnardo: http://www.squaredroot.com/2009/08/07/mvcmembership-release-1-0/#comment-382)

Comments:

closing this ticket as I'm no longer using CodePlex

Closed Issue: what the hell is the administrator password !? [8588]

TroyGoode — Fri, 02 Nov 2012 13:19:05 GMT

the password is undocumentet (oer VERY well hidden)
 
it's kind of needed to login !

Comments:

closing this ticket as I'm no longer using CodePlex

Closed Feature: Toggle force profile population with OpenID authentication [627]

TroyGoode — Fri, 02 Nov 2012 13:17:01 GMT

I'll refer to myself from this work item http://www.codeplex.com/MvcMembership/WorkItem/View.aspx?WorkItemId=544:
---
I've integrated OpenID with my current project according to similar system as Peter's: http://www.eggheadcafe.com/tutorials/aspnet/4b3c7c9b-fe80-4e6e-a34e-0e9efed5c575/integrate-openid-authenti.aspx although I'm not using the Altairis Simple providers or Peter's derivatives. As in Peter's example, I have a system that once a user logs in with his/her OpenID the user is a) redirected to fill out his profile (new user) or b) redirected to requested / current page. I register users using the default Membership & Role providers with OpenID as the user's username. I don't show the OpenID in public, instead when user fill outs profile (mandatory) he/she can choose a public nickname. The profile fill out process takes into account if the user has filled out information on his OpenID profile. For example, let's say the user has filled out his nickname, birthdate and country on his OpenID account and is willing to share them. I request them as optional info and fill the profile fields automagically on my site using the users OpenID information. Smoother user experience. :-)
 
Troy, you mentioned here http://www.codeplex.com/MvcMembership/WorkItem/View.aspx?WorkItemId=503 the default profile provider as being pretty bad and I fully agree (storing profile stuff in a blob, brrrr). I'm using the default Membership and Role providers as well as the SQL table profile provider http://weblogs.asp.net/scottgu/archive/2006/01/10/435038.aspx. The latter works well as a replacement for the default provider.
---
Troy's questions and my thoughts (not answers! I hope others chime in too):
1) What if the user gets to the profile population screen and navigates away? Would the user then see the profile population screen for every request until they've filled it out?
This is what I have implemented on my current project ("Please fill out your profile or logout to continue." along those lines) although the question written to words got me thinking whether this approach is too enforcing. Users usually don't like to be forced (I don't :-)) but sometimes they need to be nudged forward. A good point to ponder upon.
2) Would the user's account be registered with the system prior to successfully submitting the form?
In my implementation I don't register authenticated OpenID users with ASP.NET Membership (& Role) systems if they don't fill out the profile. Again, this is just how I initially decided to handle it. Kind of like I don't want stragglers around (just to say that I have so and so many registered users) but full commitment from users. :-)

Comments:

closing this ticket as I'm no longer using CodePlex

Created Issue: what the hell is the administrator password !? [8588]

montago — Sat, 07 May 2011 08:37:06 GMT

the password is undocumentet (oer VERY well hidden)

it's kind of needed to login !

Closed Issue: Special Characters in Role Names [5221]

TroyGoode — Thu, 24 Jun 2010 22:24:27 GMT

When using special characters when creating new Roles to be assigned to different users, if you create a role named "Role #1", trying to delete that role results in "HTTP Error 400 - Bad Request" due to the illegal characters in the URL getting blocked by IIS/ASP.NET security.
Comments:

This is fixed in the latest source on GitHub.

Created Issue: Special Characters in Roles [5221]

Intaxity — Sat, 16 Jan 2010 00:41:21 GMT

Created Issue: Accessing LastActivityDate throws exception when using ActiveDirectoryMembershipProvider.

TroyGoode — Tue, 18 Aug 2009 03:05:15 GMT

Any attempt to read or write to/from the LastActivityDate property will throw a NotSupportedException...

http://msdn.microsoft.com/en-us/library/system.web.security.activedirectorymembershipuser%28VS.85%29.aspx

(As reported by robnardo: http://www.squaredroot.com/2009/08/07/mvcmembership-release-1-0/#comment-382)

Closed Issue: Getting 'An item with the same key has already been added' error when clicking on the 'Details' link

TroyGoode — Sun, 09 Aug 2009 17:07:52 GMT

I downloaded the 24433 build this morning. I loaded the Trunk file in Visual Studio. The solution built with no error. I run the site and the initial User Admin page come up fine. Pageing works. Whne I click on the user name to go to the Details page I get the following YSOD:

An item with the same key has already been added.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.ArgumentException: An item with the same key has already been added.

Source Error:

Line 79: var user = _userService.Get(id);
Line 80: var userRoles = _rolesService.FindByUser(user);
Line 81: return View(new DetailsViewModel
Line 82: {
Line 83: DisplayName = user.UserName,

Source File: C:\mcb\work\Apps\MVC\Membership\MVC_membership\Build_24433\trunk\SampleWebsite\Controllers\UserAdministrationController.cs Line: 81

Let me know if you need any additional information.

-MARK-
putrtek@gmail.com
Comments:

Glad to see we found the root of the problem. In my testing I was unable to duplicate your scenario as the default ASPNETDB has an index on the RoleName column preventing duplicates. I assume you're using a custom RoleProvider or have in some other way customized the role database and lost this constraint.

I've committed a change to the trunk that checks for the existence of duplicates and throws a meaningful error message so that hopefully this will be clearer to anyone encountering this problem in the future.

Commented Issue: Getting 'An item with the same key has already been added' error when clicking on the 'Details' link

putrtek — Fri, 07 Aug 2009 19:12:21 GMT

Good Catch Troy that was it. There was in fact a duplicate RoleName in the aspnet_Roles table. Differant RoleID's but the same RoleName... Deleting the duplicate role resolved the issue Everything works fine. I'm able to get to the details screen now and update and save user info. Thanks for your assistance.

-MARK-

Commented Issue: Getting 'An item with the same key has already been added' error when clicking on the 'Details' link

TroyGoode — Fri, 07 Aug 2009 17:50:31 GMT

Interesting. It appears to be this line that is throwing it:

*_rolesService.FindAll().ToDictionary(role=> role, role=> userRoles.Contains(role))*

The purpose of this line is to turn a list of all the roles in the system into a dictionary that contains the role and a boolean denoting whether or not the selected user is in that role. The error message _"An item with the same key has already been added."_ suggests that a duplicate role exists. Would you mind posting what roles are listed on the User Administration's Index page?

If the problem is indeed what I suspect, changed *FindAll().ToDictionary* to *FindAll().Distinct().ToDictionary* should fix your problem - but I'd love to know how the list of roles is getting a duplicate in there.

Created Issue: Getting 'An item with the same key has already been added' error when clicking on the 'Details' link

putrtek — Fri, 07 Aug 2009 15:59:30 GMT

Commented Feature: Toggle force profile population with OpenID authentication

TroyGoode — Fri, 07 Aug 2009 14:45:03 GMT

I'll refer to myself from this work item http://www.codeplex.com/MvcMembership/WorkItem/View.aspx?WorkItemId=544:
---
I've integrated OpenID with my current project according to similar system as Peter's: http://www.eggheadcafe.com/tutorials/aspnet/4b3c7c9b-fe80-4e6e-a34e-0e9efed5c575/integrate-openid-authenti.aspx although I'm not using the Altairis Simple providers or Peter's derivatives. As in Peter's example, I have a system that once a user logs in with his/her OpenID the user is a) redirected to fill out his profile (new user) or b) redirected to requested / current page. I register users using the default Membership & Role providers with OpenID as the user's username. I don't show the OpenID in public, instead when user fill outs profile (mandatory) he/she can choose a public nickname. The profile fill out process takes into account if the user has filled out information on his OpenID profile. For example, let's say the user has filled out his nickname, birthdate and country on his OpenID account and is willing to share them. I request them as optional info and fill the profile fields automagically on my site using the users OpenID information. Smoother user experience. :-)

Troy, you mentioned here http://www.codeplex.com/MvcMembership/WorkItem/View.aspx?WorkItemId=503 the default profile provider as being pretty bad and I fully agree (storing profile stuff in a blob, brrrr). I'm using the default Membership and Role providers as well as the SQL table profile provider http://weblogs.asp.net/scottgu/archive/2006/01/10/435038.aspx. The latter works well as a replacement for the default provider.
---
Troy's questions and my thoughts (not answers! I hope others chime in too):
1) What if the user gets to the profile population screen and navigates away? Would the user then see the profile population screen for every request until they've filled it out?
This is what I have implemented on my current project ("Please fill out your profile or logout to continue." along those lines) although the question written to words got me thinking whether this approach is too enforcing. Users usually don't like to be forced (I don't :-)) but sometimes they need to be nudged forward. A good point to ponder upon.
2) Would the user's account be registered with the system prior to successfully submitting the form?
In my implementation I don't register authenticated OpenID users with ASP.NET Membership (& Role) systems if they don't fill out the profile. Again, this is just how I initially decided to handle it. Kind of like I don't want stragglers around (just to say that I have so and so many registered users) but full commitment from users. :-)
Comments: ** Comment from web user: TroyGoode **

Unfortunately OpenID authentication was removed from the latest release. I am planning to include it in the next release, but this particular feature likely won't make it in.

Closed Task: Add a constructor in the controllers to receive a MembershipProvider / RoleProvider

TroyGoode — Fri, 07 Aug 2009 14:36:15 GMT

If the controllers have an additional constructor to receive the membership provider or role provider instead of using always the singleton instance, the code will be much easier to test with TDD (The membership provider can be mocked).

For example,

private MembershipProvider _provider;

BaseFormsAuthenticationController ()
{
_provider = dotNetMembership.Provider;
}

BaseFormsAuthenticationController(MembershipProvider provider)
{
_provider = provider;
}

Thanks
Pablo.
Comments:

The controllers now use "poor man's DI" to allow the provider to be injected.

Closed Task: Add Unit Tests, Switch To TDD

TroyGoode — Fri, 07 Aug 2009 14:33:40 GMT

We should wait until the next release on this, as it has been mentioned that unit testing will be dramatically simplified. That said, we still have two questions open:

What unit testing framework?

What mocking framework?
Comments:

The latest release was written using TDD (xUnit & Moq).

Closed Issue: Not Compatible with the ASP.NET MVC Framework RC

TroyGoode — Fri, 07 Aug 2009 14:32:50 GMT

There are a number of conflicts between the MVC RC and the Starter Kit P5, if we can build a comprehensive list, then we can update the project.

For instance:
* Code-behind-less aspx's now require <%@ Import Namespace="System.Linq.Expressions" %> directive in order for the Html.ActionLink<>() code to work
* Need to replace the Html.Form(){} code with Html.BeginForm\Html.EndForm
Comments:

The latest release is compatible with the final release version of MVC 1.0.

Commented Issue: Not Compatible with the ASP.NET MVC Framework RC

mabra — Tue, 02 Jun 2009 21:25:41 GMT

Hi All !

I commit, that, what I've downloaded today is compilable and runs with MVC 1.0. But, so I am very sorry, It does not contain any docs or readme's. I think I've mis-interpreted the word starter. I am beginner and this project looks like for made for experts. In the project[-explorer] the database does not appear, so how is user-validation done [I cannot login and there seems to be no data in the table {just enters omething??}]. Reading source code is not helpful, if there is no big picture. Where would a beginner really start?

br--mabra

Commented Issue: Not Compatible with the ASP.NET MVC Framework RC

putrtek — Mon, 01 Jun 2009 15:26:11 GMT

As Troy mentions the Sample website from the Trunk DOES work with MVC 1.0 , however the sample is somwhat limited. The created User From is not included neither is there anything about Roles.

Awesome work Troy and Martin. We love to see a MVC 1.0 official release. Keep up the good work!

-MARK-
putrtek@gmail.com

Commented Issue: Not Compatible with the ASP.NET MVC Framework RC

TroyGoode — Fri, 22 May 2009 11:53:27 GMT

@br-mabra,

It is alive, but eeking along slowly as I manage to fit the time in to work on it. Rather than waiting for a release, try downloading the trunk, which DOES work with RTM.

Troy

Commented Issue: Not Compatible with the ASP.NET MVC Framework RC

mabra — Thu, 21 May 2009 23:36:25 GMT

Hi Guys!

Sorry, will not sound like a beast - I know and welcome very much, that it free, but this does'nt really help anything, if it is not working. Your answer was from Febriuary;Is the project alive??

br-mabra

Closed Task: Setup.exe reported as Trojan backdoor.VB

TroyGoode — Sat, 07 Feb 2009 19:35:50 GMT

See the attached screenshot. I don't think that your installer in fact contains a trojan, but it would be nice it did not report as such.
Comments: Scanned the Preview 5 installer and it did not flag as a trojan.