ASP.NET forms authentication doesn't work with reverse proxy

Question

I have an ASP.NET application. As well as local users accessing the application directly, I want to expose it to external users through a reverse proxy (which is running on a different machine in the DMZ)

for example, say internal users use the URL http://intranet1/myApplication/default.aspx, external users might use the URL http://www.mycompany.com/externalApplication/default.aspx

this is quite simple to set up with URL rerwiting, but there is a problem when forms authentication is turned on. if an external user hits the URL site, forms auth tries to automatically send them to the login page which redirects them to the relative url /myApplication/LoginPage.aspx. as far as the web app is concerned, the application root is at /myApplication not /externalApplication. Of course the external user coming in through the firewall does not understand this URL so the request fails with a 404

is there a sensible solution for this?

How did you resolve this ? please take a look at here

Aria
– Aria

2019-09-02 12:46:01 +00:00
Commented Sep 2, 2019 at 12:46 — Aria
– Aria, Commented Sep 2, 2019 at 12:46

Alexander Beletsky · Accepted Answer · 2010-12-15 13:52:33Z

2

You should not redirect to "/myApplication/LoginPage.aspx" but to "~/Login.aspx", so it would be correctly mapped depends on which URL is user hits on.

<authentication mode="Forms">
  <forms loginUrl="~/Login.aspx" timeout="2880" />
</authentication>

answered Dec 15, 2010 at 13:52

Alexander Beletsky

19.9k10 gold badges65 silver badges86 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Joel Etherton Over a year ago

It also wouldn't hurt to have the application defined as the same folder on both servers.

Andy Over a year ago

Thanks alexanderb, That's exactly what I was looking for. I had completely forgotten that the URL was configurable in the web.config.

Andy Over a year ago

Hmm, I've had another think about that. Surely your suggestion is no different to my original configuration (loginurl="/MyApplication/default.aspx") because the ~ will be converted to /MyApplication before the redirect is sent to the browser

Alexander Beletsky Over a year ago

no, it actually sure re-direct to externalApplication/login.aspx if rest URL rerwiting is ok :)

Collectives™ on Stack Overflow

ASP.NET forms authentication doesn't work with reverse proxy

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related