Why can’t I hash the password in my Seed method?

Asked

Viewed 123 times

3

I’m trying to use my method seed below to create a user in the database when it is created:

protected override void Seed(CodingCraftMod1Ex4AuthMembershipContext context)
{
    string password = PasswordsHelper.EncodePassword("123456", System.Web.Security.MembershipPasswordFormat.Hashed);

    var user = new CustomUser
    {
        CustomUserId = Guid.NewGuid(),
        Name = "MyUser",
        CreatedOn = DateTime.Now,
        LastModified = DateTime.Now
    };

    context.CustomUsers.Add(user);
    context.SaveChanges();

    var membership = new Membership
    {
        MembershipId = Guid.NewGuid(),
        CustomUser = user,
        Password = password,
        CreatedOn = DateTime.Now,
        LastModified = DateTime.Now,
    };

    context.Memberships.Add(membership);
    context.SaveChanges();
}

But I get the following mistake:

Hashed or Encrypted passwords are not supported with auto-generated Keys

I’m already using the element machineKey, thus:

<machineKey   validationKey="13687AD58719815734D5ECA97AADA159F4084FE994E32192243818A714DD6BC763B9F3D8AE7B3A7858A268D8EAAB37BF5031E77E5971C82BC1ACEA478C76C6CF" 
decryptionKey="A39F3B62B3CAAD3F75358197CA1D880BA3F392BE79AE4E91D2A09219D82A6978"
validation="SHA1" 
decryption="AES" />

I used this online tool to generate the keys.

Below is the custom snippet of the method that hashes the password in the method EncodePassword:

case MembershipPasswordFormat.Hashed:
    HMACSHA1 hash = new HMACSHA1();
    hash.Key = HexToByte(machineKey.ValidationKey);
    encodedPassword =
        Convert.ToBase64String(hash.ComputeHash(Encoding.Unicode.GetBytes(password)));
    break;
c# asp.net-mvc-5 cryptography passwords

  • Did you customize the generation of the Membership password? It is probably in "Clear" format and not Hashed. Can you pass the configuration? You’re using that technology?

  • I edited the question with a few more details. I don’t quite understand what technology you want me to specify, but any questions just ask.

1 answer

0


I couldn’t find a way to make the hash work using my custom membership code.

It’s even obvious, but I’ll leave the form that I agreed to. Instead of using the section below:

string password = PasswordsHelper.EncodePassword("123456", System.Web.Security.MembershipPasswordFormat.Hashed);

I simply hashed the password I wanted to use for the user created in Seed and put straight into the method, already as Hash:

string password = "h+V92o4VkQjWgegKgqwprJ2PUFU=";

Browser other questions tagged c# asp.net-mvc-5 cryptography passwords

You are not signed in. Login or sign up in order to post.