Asp. NET security issues--asp.net authentication and authentication modules in the lifecycle

The main topic of this article:

1.ASP. Life cycle validation of the net operation

2. Authentication Module

3. Authorization Module

1.ASP. Life cycle validation of the net operation

In fact, each request in the ASP.net is validated and authorized. The process of authentication and authorization is actually done by triggering the corresponding event.

Before you talk about validation events, you should first clear a process: The ASP.net runtime receives a request processing process.

Describe the process first, so that everyone has a general grasp: A request came through IIS, through the ISAPI, reached the ASP.net pipeline, and then after some transformation and packaging, and then asp.net the runtime to start processing the request, and then for authentication and authorization, And then a series of processing, and finally determine what the request is the file, if it is. aspx, then start the page life cycle, the following figure.