Source

I decided to use IPrincipal instead of IIdentity because it means I don’t have to implement both IIdentity and IPrincipal.

1. Create the interface
   
   C#

   interface ICustomPrincipal : IPrincipal { int Id { get; set; } string FirstName { get; set; } string LastName { get; set; } }

   1 2 3 4 5 6

   interface ICustomPrincipal : IPrincipal {     int Id { get; set; }     string FirstName { get; set; }     string LastName { get; set; } }

2. CustomPrincipal
   
   C#

   public class CustomPrincipal : ICustomPrincipal { public IIdentity Identity { get; private set; } public bool IsInRole(string role) { return false; } public CustomPrincipal(string email) { this.Identity = new GenericIdentity(email); } public int Id { get; set; } public string FirstName { get; set; } public string LastName { get; set; } }

   1 2 3 4 5 6 7 8 9 10 11 12 13 14

   public class CustomPrincipal : ICustomPrincipal {     public IIdentity Identity { get; private set; }     public bool IsInRole(string role) { return false; }       public CustomPrincipal(string email)     {         this.Identity = new GenericIdentity(email);     }       public int Id { get; set; }     public string FirstName { get; set; }     public string LastName { get; set; } }

   
    
3. CustomPrincipalSerializeModel – for serializing custom information into userdata field in FormsAuthenticationTicket object.
   
   C#

   public class CustomPrincipalSerializeModel { public int Id { get; set; } public string FirstName { get; set; } public string LastName { get; set; } }

   1 2 3 4 5 6

   public class CustomPrincipalSerializeModel {     public int Id { get; set; }     public string FirstName { get; set; }     public string LastName { get; set; } }

   
    
4. LogIn method – setting up a cookie with custom information
   
   C#

   if (Membership.ValidateUser(viewModel.Email, viewModel.Password)) { var user = userRepository.Users.Where(u => u.Email == viewModel.Email).First(); CustomPrincipalSerializeModel serializeModel = new CustomPrincipalSerializeModel(); serializeModel.Id = user.Id; serializeModel.FirstName = user.FirstName; serializeModel.LastName = user.LastName; JavaScriptSerializer serializer = new JavaScriptSerializer(); string userData = serializer.Serialize(serializeModel); FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket( 1, viewModel.Email, DateTime.Now, DateTime.Now.AddMinutes(15), false, userData); string encTicket = FormsAuthentication.Encrypt(authTicket); HttpCookie faCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket); Response.Cookies.Add(faCookie); return RedirectToAction("Index", "Home"); }

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27

   if (Membership.ValidateUser(viewModel.Email, viewModel.Password)) {     var user = userRepository.Users.Where(u => u.Email == viewModel.Email).First();       CustomPrincipalSerializeModel serializeModel = new CustomPrincipalSerializeModel();     serializeModel.Id = user.Id;     serializeModel.FirstName = user.FirstName;     serializeModel.LastName = user.LastName;       JavaScriptSerializer serializer = new JavaScriptSerializer();       string userData = serializer.Serialize(serializeModel);       FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(              1,              viewModel.Email,              DateTime.Now,              DateTime.Now.AddMinutes(15),              false,              userData);       string encTicket = FormsAuthentication.Encrypt(authTicket);     HttpCookie faCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket);     Response.Cookies.Add(faCookie);       return RedirectToAction("Index", "Home"); }

   
    
5. Global.asax.cs – Reading cookie and replacing HttpContext.User object, this is done by overriding PostAuthenticateRequest
   
   C#

   protected void Application_PostAuthenticateRequest(Object sender, EventArgs e) { HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName]; if (authCookie != null) { FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value); JavaScriptSerializer serializer = new JavaScriptSerializer(); CustomPrincipalSerializeModel serializeModel = serializer.Deserialize<CustomPrincipalSerializeModel>(authTicket.UserData); CustomPrincipal newUser = new CustomPrincipal(authTicket.Name); newUser.Id = serializeModel.Id; newUser.FirstName = serializeModel.FirstName; newUser.LastName = serializeModel.LastName; HttpContext.Current.User = newUser; } }

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

   protected void Application_PostAuthenticateRequest(Object sender, EventArgs e) {     HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName];       if (authCookie != null)     {         FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);           JavaScriptSerializer serializer = new JavaScriptSerializer();           CustomPrincipalSerializeModel serializeModel = serializer.Deserialize<CustomPrincipalSerializeModel>(authTicket.UserData);           CustomPrincipal newUser = new CustomPrincipal(authTicket.Name);         newUser.Id = serializeModel.Id;         newUser.FirstName = serializeModel.FirstName;         newUser.LastName = serializeModel.LastName;           HttpContext.Current.User = newUser;     } }

   
    
6. Access in Razor views
   
   C#

   @((User as CustomPrincipal).Id) @((User as CustomPrincipal).FirstName) @((User as CustomPrincipal).LastName)

   1 2 3

   @((User as CustomPrincipal).Id) @((User as CustomPrincipal).FirstName) @((User as CustomPrincipal).LastName)

   
    

 

and in code:

I think the code is self-explanatory. If it isn’t, let me know.

Additionally to make the access even easier you can create a base controller and override the returned User object (HttpContext.User):

and then, for each controller:

which will allow you to access custom fields in code like this:

But this will not work inside views. For that you would need to create a custom WebViewPage implementation:

Make it a default page type in Views/web.config:

and in views, you can access it like this: