private static void blowUpIfEmployeeCannotLogin(User user) { if (user == null) { throw new InvalidCredentialException( "That user doesn't exist or is not valid."); } }
public void LogIn(User user) { blowUpIfEmployeeCannotLogin(user); FormsAuthentication.RedirectFromLoginPage(user.Username, false); }
public bool PasswordMatches(User user, string password) { string passwordHash = _cryptographer.GetPasswordHash(password, user.PasswordSalt); return passwordHash.Equals(user.PasswordHash); }