使用 MongoDB C# (ASP.NET) 的登录表单

Question

I'm having difficulty with the login part.

I have added a textbox ( txtresult ) in Login part to see what I'm getting and the result is

find({ "Email": "the email I've added" })

I also need an if statement to complete the login form and go to another page.

Register code behind (works fine)

protected void btnSignUp_Click(object sender, EventArgs e)
{
        var Connection = "mongodb://localhost";
        var client = new MongoClient(Connection);
        var Db = client.GetDatabase("bookstore_db");
        var Collection = Db.GetCollection<UserModel>("User");

        UserModel db = new UserModel();

        db.FirstName = txtFirstName.Text.ToString();
        db.LastName = txtLastName.Text.ToString();
        db.Email = txtEmail.Text.ToString();
        db.Password = txtPassword.Text.ToString();

        Collection.InsertOneAsync(db);
        Response.Redirect("index.aspx");
}

Answer 1

There are several issues in your code:

1. You are creating a new MongoClient for each request, and that is not correct. You should create a MongoClient singleton and use always the same one.

2. You do not have separation of concerns, you should not have database logic in your controllers, instead, you should abstract all that logic in another class, eg, IUserRepository

3. You should NEVER store the user password in plain text as you are trying to do. That leads to huge security problems, instead you should always hash the password and only then store the hash. Microsoft documentation on how to hash passwords.

4. Database operations should be asynchronous, so you should return Task. Async/await Official Documentation

I have refactored a little your code, use it as an example, and work on that:

UserRepository

public interface IUserRepository
{
    Task CreateUser(UserModel user);
}

public class UserRepository : IUserRepository
{
    private readonly IMongoCollection<UserModel> _collection;

    public UserRepository()
    {
        const string connection = "mongodb://localhost";
        var mongoClient = new MongoClient(connection);
        IMongoDatabase? database = mongoClient.GetDatabase("bookstore_db");
        _collection = database.GetCollection<UserModel>("User");
    }

    public Task CreateUser(UserModel user)
    {
        return _collection.InsertOneAsync(user);
    }
}

UserController

public class UserController : Controller
{
    private readonly IUserRepository _userRepository;

    public UserController(IUserRepository userRepository)
    {
        _userRepository = userRepository;
    }
    
    protected async Task RegisterUser(object sender, EventArgs e)
    {
        UserModel user = new UserModel
        {
            FirstName = txtFirstName.Text.ToString(),
            LastName  = txtLastName.Text.ToString(),
            Email     = txtEmail.Text.ToString(),
            Password  = txtPassword.Text.ToString()
        };
        await _userRepository.CreateUser(user);
        Response.Redirect("index.aspx");
    }
}

This solves a few of the code problems, and it also adds asynchronism, which improves performance.