I'm trying to create a user authentication system for an application. I can't use a built in library for that such as ASP.NET Identity, but I can use any simple methods in .net.
Not wanting to rollout my own crypto, of course, I'm using PBKDF2 for authenticating the user's password. But this is where I'm stuck. I assume that now I need to create some temporary ID and have the client and server use that until some time expires without client action. But I can't seem to find a source for this as most articles I've seen deal with ready made libraries.
So - am I correct? And if you have some source or more pointers, that would be welcome.