Puck CMS - ASP.NET Core, Open Source, Cross Platform CMS

let's say you have a section of your website you want to protect behind a login, and the path for that section is `/news/`. 
first create a controller that inherits from `puck.core.Controllers.BaseController` which will have an action named "Protected":

```cs
public class ProtectedController : BaseController
    {
        [Authorize(Roles = "premium")]
        public ActionResult Protected() {
            return base.Puck();
        }
    }
```
the name of the controller or the action aren't important and can change, you just need a controller that inherits from `puck.core.Controllers.BaseController` with an Action that has an `[Authorize]` attribute that returns `base.Puck()`.

next you need to add a new route to `Startup.cs` (add it below the "puckarea" route):
```cs
endpoints.MapControllerRoute(
  name: "news",
  pattern: "news/{**path}"
  ,defaults: new { controller = "Protected", action = "Protected"}
);
```
the route will match anything in your news section and route it to your new controller where authorization takes place and if successful, `base.Puck()` will be executed to retrieve the current page. if unsuccessful, they'll obviously be redirected to the login page.

## working with a custom Identity User
check out [this page](/wiki/custom-schema-and-user) on setting up your own Identity User.

## changing the login page paths
you can customise the default `LoginPath`,`LogoutPath` and `AccessDeniedPath` by modifying your `Startup.cs` file.
modify the call to `services.AddPuckServices`:
```cs
if (Configuration.GetValue<bool?>("UseSQLServer") ?? false)
                services.AddPuckServices<User, Role, DbContextSQLServer>(Env, Configuration, ServiceLifetime.Scoped,configureCookieAuthenticationOptions:x=> { x.LoginPath = "/accounts/login";});
            else if (Configuration.GetValue<bool?>("UsePostgreSQL") ?? false)
                services.AddPuckServices<User, Role, DbContextPostgreSQL>(Env, Configuration, ServiceLifetime.Scoped, configureCookieAuthenticationOptions: x => { x.LoginPath = "/accounts/login"; });
            else if (Configuration.GetValue<bool?>("UseMySQL") ?? false)
                services.AddPuckServices<User, Role, DbContextMySQL>(Env, Configuration, ServiceLifetime.Scoped, configureCookieAuthenticationOptions: x => { x.LoginPath = "/accounts/login"; });
            else if (Configuration.GetValue<bool?>("UseSQLite") ?? false)
                services.AddPuckServices<User, Role, DbContextSQLite>(Env, Configuration, ServiceLifetime.Scoped, configureCookieAuthenticationOptions: x => { x.LoginPath = "/accounts/login"; });

```
in the above example we're specifying the `LoginPath` for all database types but you only need to specify it for the database you're using.

Protecting Pages with Logins