Thursday, August 9, 2007

struggling with authentication, nicely

I've been trying for a way to merge the two worlds of XHR and ASP.NET authentication. Talk about a foot in each camp! I keep getting close, and then it slips away from me again. The power to rebiuld the HTTP processing pipeline would seem to provide a lot of power, yet the otherwise-closed source of FormsAuthenticationModule keeps getting in the way. The insertion of an HttpModule allowing me to intercept its attempts at redirect seemed like the answer, but so far it blindly proceeds anyway.
its late, hopefully I'm just screwing up something.

1 comment:

Unknown said...

Ha! I was mostly right. I was patching into the HTTP pipeline correctly, but wasn't aware that the target page for the credentials had a validation check to make sure it wasn't coming from elsewhere - which it was as I was POSTing the data directly to the page!
Once I fixed that, it worked well.
The ability to reorder the HTTP pipeline is very powerful.