Re: url rewriting and authentication



You can manually call

UrlAuthorizationModule.CheckUrlAccessForPrincipal

and do a redirect to your login pages based on the outcome.

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Hello All,

We have an application in which we are planning to have a virtual url
system which is completely driven by configuration files. to
accomplish this we need to receive all urls at the same directory
path, and then according to url rules write them out to different
pages which might be in different folders.

The problem is that some of these folders might be restricted by forms
authentication, so we need to somehow need to fire formsauthentication
after the real url is known, and then redirect to login url with the
virtual url.

The current url rewriting is done by an httpmodule by trapping the
ResolveRequestCache event ( we were using the authorize event, but we
realized that caching was not working with it)

in this scenario is it possible to use the forms authentication module
?, or is there any other valid workaround.

any help or opinion would be appreciated.



.



Relevant Pages

  • Re: Default.aspx - newbie Q`
    ... check and redirect to the ReturnURL or Selected.aspx depending on the case. ... > and replace it with something that takes then straight to the login page. ... >> Curt Christianson ... >>> authentication ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Default.aspx - newbie Q`
    ... check and redirect to the ReturnURL or Selected.aspx depending on the case. ... > and replace it with something that takes then straight to the login page. ... >> Curt Christianson ... >>> authentication ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: doesnt redirect
    ... Look under the Security tab. ... One of them is called the Internet zone and probably the one you are using. ... or better explain what you mean by>> redirect ... I think there are 2 interstitchal pages after submitting those login credentials before you get to the mailbox web page. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Accessing and displaying SSL web pages and cookies from a windows form
    ... or LoadXML calls to urls on the website in order to get data or post data to ... first redirected to a SSL login page, if a particular cookie is not present, ... cookie is not present instead of getting the data. ... >> the data in the cookie and also not redirect to the login page. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Login problem
    ... redirect the user. ... Samuel Shulman wrote: ... Use either Forms Authentication or Basic Authentication. ... If the user types in the url the Login.aspx file then enters the username and the password, clicks the login button and the form validates the values against values from the database ...
    (microsoft.public.dotnet.framework.aspnet)