我无法使用 asp.net 身份验证登录 asp.net mvc5 的用户

Question

I am using asp.net identity the moment I place the [authorize] tag on top of the action that redirects me to the user dashboard I am redirected back to the login page. This to me means that something is missing from my asp.net identity as I am unable to authorize any user to access the dashboard unless I remove the authorize tag

My Home controller for Login

 [HttpPost]
        [ValidateAntiForgeryToken]
        public ActionResult Login(UserProfile objUser)
        {
            if (ModelState.IsValid /*&& WebSecurity.Login(objUser.UserName.ToString(), objUser.Password )*/)
            {
                using (MarketingDBEntitiesModel db = new MarketingDBEntitiesModel()) 
                {
                    var obj = db.UserProfiles.Where(a => a.UserName.Equals(objUser.UserName) && a.Password.Equals(objUser.Password)).FirstOrDefault();

                    if (obj != null)
                    {
                        Session["UserID"] = obj.UserId.ToString();
                        Session["UserName"] = obj.UserName.ToString();
                        ConfigurationManager.AppSettings["CurrentUserId"] = Session["UserID"].ToString();                     
                        ConfigurationManager.AppSettings["UserName"] = objUser.UserName;
                        //await SignIn(obj.UserId.ToString(), false);
                        return RedirectToAction("UserDashBoard");
                    }
                }
            }
            return View(objUser);
        }

        [Authorize]
        public ActionResult UserDashBoard()
        {
            if (Session["UserID"] != null)
            {
                return View();
            }
            else
            {
                return RedirectToAction("Login");
            }
        }

My Web Config

<authentication mode="Forms">
      <forms loginUrl="~/Home/Login" timeout="2880" />
    </authentication>

Answer 1

Of course, this would fail. Your code is not authorizing a user, you're just setting values to the session and saving them to the web.config.

Take a look at this article, ASP.NET MVC Authorization and Security .