On 1 feb, 09:39, Henri Gourvest <
hgourv...@gmail.com> wrote:
> I have not implemented classic HTTP authentication, I think it is useless.
> Create a simple html form and use "Session" object to store user
> informations in the app cookie.
> I suggest you inherith all controler from a common controller class where
> you can check authentication, overriding "Invoke" method, so you will be
> able to redirect automatically to the login page when user is not
> authenticated.
> I suggest to use SLL when authenticating (check "HaveSLL" value).
>