Response.Redirect with Forms Authentication redirecting to forms loginUrl

Question

Response.Redirect with Forms Authentication redirecting to forms loginUrl

niraj zambad 1

I am using Forms authentication in asp.net C# web App.
When user click on a "Edit" button, he should be redirected to another page with some query string parameter.
It works locally but when I publish the application and drop files on Hostgator it redirects to the login url rather than the page i was expecting with query string.
Following is the code snippet I am using for redirection
Response.Redirect("EditPurchase.aspx?Supplier=" + Convert.ToString(ddlSupplierName.SelectedValue).Trim() + "&Invoice=" + Convert.ToString(ddlInvoiceNumber.SelectedValue).Trim() + "");

I am not getting why it is redirecting me to default login url. For any reason, what is the solution for this? Please guide me

Lan Huang-MSFT 11,666 Reputation points Microsoft Vendor

2022-01-20T05:51:20.383+00:00

Hi @niraj zambad ,

It works locally but when I publish the application and drop files on Hostgator

Did the local redirect succeed, and did you remove important information when publishing it?
Best regards,
Lan Huang
niraj zambad 1 Reputation point

2022-01-20T18:08:14.677+00:00

Yes Redirect works locally. What Important Information I should not remove?

Lan Huang-MSFT 11,666 Reputation points Microsoft Vendor

2022-01-20T05:51:20.383+00:00

Hi @niraj zambad ,

It works locally but when I publish the application and drop files on Hostgator

Did the local redirect succeed, and did you remove important information when publishing it?
Best regards,
Lan Huang
niraj zambad 1 Reputation point

2022-01-20T18:08:14.677+00:00

Yes Redirect works locally. What Important Information I should not remove?

Answer 1

Michael Taylor 41,111

Is the user logged in at the point they click the Edit button? If so then the user's session information should be part of the redirect and therefore they wouldn't get a login prompt. It appears that the authentication information isn't being passed along. You can watch the browser's network traffic to confirm that the session information is getting passed along properly.

Given you used the web forms tag I'm assuming this is a web forms app correct?

Can you discuss the logic for your edit button? I assume it is an actual button. I also assume you have a server side event handler reacting to the button click. It does whatever and then calls the redirect. For your specific redirect to work the .aspx page needs to be in the same directory as the current page, otherwise you need to use either a virtual path or resolve the full URL first.

niraj zambad 1 Reputation point

2022-01-20T18:21:15.84+00:00
Yes User is logged in at point they click Edit button.
Yes it is a web form app.

protected void btnEdit_Click(object sender, EventArgs e) { if (ddlSupplierName.SelectedIndex > -1 && ddlInvoiceNumber.SelectedIndex > -1) { Response.Redirect("EditPurchase.aspx?Supplier=" + Convert.ToString(ddlSupplierName.SelectedValue).Trim() + "&Invoice=" + Convert.ToString(ddlInvoiceNumber.SelectedValue).Trim() + "",false); } }

Please is in the same directory.

Code in Global.asax

protected void Application_AuthenticateRequest(Object sender, EventArgs e)
{
if (HttpContext.Current.User != null)
{
if (HttpContext.Current.User.Identity.IsAuthenticated)
{
if (HttpContext.Current.User.Identity is FormsIdentity)
{
FormsIdentity id = (FormsIdentity)HttpContext.Current.User.Identity;
FormsAuthenticationTicket ticket = id.Ticket;
string userData = ticket.UserData;
string[] roles = userData.Split(',');
string[] roleType = userData.Substring(userData.LastIndexOf('=') + 1).Split(',');
HttpContext.Current.User = new GenericPrincipal(id, roleType);
}
}
}
}
Michael Taylor 41,111 Reputation points

2022-01-20T19:13:03.44+00:00

You posted the authenticate request function. Is that getting called on the redirect and, if so, then is the user being shown as unauthenticated or is something else wrong with the user?

Have you tried using a virtual path instead (e.g. ~/EditPurchase.aspx)?

Does passing true as second parameter change the behavior?

Response.Redirect with Forms Authentication redirecting to forms loginUrl

1 answer

Activity