Designing Secure ASP.NET Applications   Forms Authentication Using an XML Users File

---

This application example expects to find an XML file named Users.xml located in the Formsauth directory. Users.xml is the file that contains the user names and passwords for the users that are authorized to access the Default.aspx file ( also located in the Formsauth directory ). Login.aspx reads the name and password information from this file and the adduser process [ adduser.aspx ] writes name and password information to the file.

Here are the default contents of the file:

<Users>
   <Users>
      <UserEmail>jdoe@somewhere.com</UserEmail>
      <UserPassword>jdoepw</UserPassword>
   </Users>
   <Users>
      <UserEmail>mary@somewhere.com</UserEmail>
      <UserPassword>marypw</UserPassword>
   </Users>
</Users>

The Forms Authentication Provider