Get rid of case sensitive username in custom membership provider

Question

I implemented a custom membership provider in ASP.net MVC, and can't figure out how to make the username non case-sensitive at signin. So, for example, "Solomon" could log in, but "solomon" could not.

My implementation is very bare bones. I basically just wrote code for ValidateUser(), and Change Password().

Thanks for the help!

Do you call database in ValidateUser()? If yes, you should make query not case sensitive. What database do you use? — LukLed, Mar 06 '10 at 04:57
I'm using a MySql database with Fluent Nhibernate as my orm. — Solomon, Mar 06 '10 at 15:21

score 2 · Accepted Answer · answered Mar 06 '10 at 05:16

2

shimms is halfway there.

Splitting a logical operation between two 'tiers' is not a sound practice.

A logical operation should be atomic. So just lower both in the query...

e.g.

where Lower(username)=Lower(@username)

answered Mar 06 '10 at 05:16

Sky Sanders

36,396
8
69
90

score 0 · Answer 2 · answered Mar 06 '10 at 05:02

0

Convert the username to its lowercase version, and then compare it to the lowercase version of the username in the database. The ANSI SQL would be:

WHERE LOWER(username) = :username

Supply the username parameter as:

... = username.ToLower();

answered Mar 06 '10 at 05:02

Michael Shimmins

19,961
7
57
90

You have a brittle logical dependency here, shimms. You should not split a logical operation. This should be an atomic comparison in the database/query. – Sky Sanders Mar 06 '10 at 05:18

Get rid of case sensitive username in custom membership provider

2 Answers2