- Added @Html.AntiForgeryToken() to Register.cshtml
- Added @Html.AntiForgeryToken() to Login.cshtml
- Fixes 400 Bad Request errors on form submission
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Features:
- Login page with username/email + password
- Registration page for new accounts
- Logout functionality
- Cookie-based authentication (30-day sessions)
- Auto-redirect to login for unauthorized access
- User dropdown in navbar with logout link
Security:
- All admin pages now require authentication
- [Authorize] attribute on all admin PageModels
- Redirect to /Login if not authenticated
- Auto-login after registration
UI:
- Beautiful gradient login/register pages
- Consistent styling with admin panel
- User info displayed in navbar
- Logout link in dropdown menu
Starting resources for new users:
- 100,000 Gold
- 500,000 Cash
- Level 1
- Full admin panel access
Ready for production deployment!