Forms authentication appends return url even though there is no return url

Question

I use forms authentication in web application. I have this in my config file. I use IIS 7

<forms loginUrl="~/Account/Login.aspx" cookieless="UseCookies" protection="All" 
       name=".ASPXAUTH" timeout="60" requireSSL="false" slidingExpiration="true"  
   enableCrossAppRedirects="false" defaultUrl="~/Dashboard.aspx" />

When i enter my site's url in the address bar it redirects me to

Account/Login.aspx?ReturnUrl=%2f instead of Account/Login.aspx

I don't know what the reason is , but when i use IIS 5.1 everything works fine.

Please help me.

shf301 · Accepted Answer · 2011-07-19 05:23:21Z

1

Forms authentication redirection puts the source URL into the login.aspx request as a parameter so it can return the user the to the page they entered. %2f = /, e.g. the root of your site. If you had entered the www.example.com/coolstuff.aspx your ReturnUrl parameter would be '%2fcoolstuff.aspx'.

Nothing is wrong, that is how forms authentication is suppose to work.

answered Jul 19, 2011 at 5:23

shf301

31.5k2 gold badges57 silver badges88 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

SiuFay · Accepted Answer · 2018-07-20 01:30:37Z

1

One option is to hide the URL in the browser address bar:

<script>
    if (history.replaceState) {
        history.replaceState({}, document.title, '//' + location.host + location.pathname);
    }
</script>

edited Jul 20, 2018 at 1:30

answered Jul 19, 2018 at 11:36

SiuFay

3533 silver badges8 bronze badges

Collectives™ on Stack Overflow

Forms authentication appends return url even though there is no return url

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related