Forms Authentication

[Øyvind Isaksen]

I'm using Forms Authentication for my users to login to a website.
It works good, but there are a couple of files that should not be password
protected (such as "forgot password").

My question is:
Is there possible to specify some files that should not be password
protected?
EX: the file "forgotPassword.aspx" should not be password protected...


This is my Web.Config file:

<configuration>
<system.web>
<authentication mode="Forms">
<forms name=".loginASPX" loginUrl="default.aspx" protection="All"
timeout="480" path="/" />
</authentication>
<authorization>
<allow users="LoginOK" />
<deny users="*" />
</authorization>
</system.web>
</configuration>


Thank you!!!

 

[Karl Seguin [MVP]]

Absolutely.

Check out:
http://www.devhood.com/tutorials/tutorial_details.aspx?tutorial_id=85

but basically, outside your <system.web> you can specify the a <location>
which overrides the generic rules, ala:

<location path="forgot.aspx">
<system.web>
<authentication mode="None" />
</system.web>
</location>

Karl

 

[Øyvind Isaksen]

Thank you, this worked!!!



"Karl Seguin [MVP]" <karl REMOVE @ REMOVE openmymind REMOVEMETOO . ANDME
net> wrote in message news:[email protected]...