MVC 5 use session to store login information?

Question

This is more a question regarding a proper approach than a coding issue. Let's say I have an MVC application with a registration and login system. I have a SQL database where I store the registration information and connect to it when the user wants to log in.

Once I authenticate the user, is it ok to store the information required ( like username ) into a session variable and then reference that throughout the application?

Answer 1

It's possible but not recommended due to many reasons. Use ASP.NET Identity to do all that. Latest versions of Visual Studio come with great sample MVC projects that implement full registration / login / lost password etc. loop.