using Forms Authentication -- asp.net

asp.net : using Forms Authentication

VR
11/16/2003 11:24:23 PM

Hi,

I am using Forms type of authentication, but having
problems redirecting users to default page after they get
authenticated.

My default page is default.aspx, but it's in 'public'
directory in realtion to my virtual directory:
"/public/default.aspx". In IIS I set the default document
to be "/public/default.aspx".

The problem is that once user is authenticated, ASP.NET
redirects him to "default.aspx" instead
of "public/default.aspx". MSDN says that "if there is no
original URL, Default.aspx is used" for
FormsAuthentication.GetRedirectUrl(...). How can I
customize the path to my default page?

Here is the code I use to authenticate a user and forward
him to the previously requested page:

FormsAuthenticationTicket oTicket =
new FormsAuthenticationTicket(szLogin, false, 1);

string szTicket =
FormsAuthentication.Encrypt(oTicket);

Response.Cookies.Add(
new HttpCookie(
FormsAuthentication.FormsCookieName, szTicket ));

string szURL =
FormsAuthentication.GetRedirectUrl(szLogin, false);

Response.Redirect(szURL);

Thanks,

John Saunders
11/17/2003 8:45:44 AM

[quoted text, click to view]

What if the user doesn't want to go to your default page?

The way Forms Authentication works is that when a user tries to go to a page
which requires authentication and they're not authenticated, they get
redirected to your login page instead. The redirection includes the desired
page in the ReturnUrl query parameter. When they've authenticated, they're
meant to be redirected to the page they requested.

When MSDN says "if there is no original URL", they're referring to the case
where the user goes directly to your login page, so that there is no
ReturnUrl parameter. In this case, the default is to go to default.aspx. You
can change this by "manually" checking to see if there's a ReturnUrl
parameter. If there isn't, you can redirect to "/public/default.aspx".

BTW, the default document in IIS is just a file name and extension, not a
path. It simply says what file name IIS will request when the user
specifies, e.g., http://yoursite/ and doesn't specify a file name.
--
John

Vic
11/17/2003 1:49:55 PM

Thanks, John.

I wasn't really clear explaining the problem. I do realize that an empty
ReturnUrl parameter is an exceptional case, occuring when the user goes
directly to the authentication page. I was trying to figure out whether it's
possible to somehow change the behavior of GetRedirectUrl() to return a page
that I consider a default.

Just like you said, I can always check ReturnUrl and manually set it. I
didn't care much for this approach because that would imply that I am
hardcoding that page that I consider a default. So, I thought maybe there is
a way to alter the bahavior of GetRedirectUrl() by tweaking something in
either web.config or in IIS.

Or, I just realized, I guess I could just add a key to web.config myself,
read it in, and use it in my app, instead of hardcoding it.

Thanks again.

VR

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about asp.net

View Other Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008

home · blog · groups

Questions? Comments? Contact the dn