Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 184
  • Last Modified:

Basic Authentication IIS .NET web application question

Hi Experts,
   I have a situation where I have a .net asp intranet application that generates PDF reports from Crystal Reports rpt files, stores the PDFs in a directory on the web server.  My problem is that I need the intranet application to access these .PDFs but I don't want to give the users the abilty to navigate to the reports directly by url.  Therefore Anonymous Authentication is not and option and I also do not want to maintain a separate list of users on the web server either (Integrated Security)  Now Im left with basic Authentication which requires the users to supply credentials via a prompt.  

What I would like to do is hard code some credentials in the web app and when making the http request pass the "Basic Authentication" credentials to the web server.  Is this possible?  How?  and/or If you have a better solution please shine some light.  Thanks
0
dbedoo
Asked:
dbedoo
1 Solution
 
spprivateCommented:
You need to make use of HTTP modules and handlers for customer autherization.
http://msdn2.microsoft.com/en-us/library/wce3kxhd(VS.80).aspx
Also there is a KB explaining your scenario.

http://support.microsoft.com/?id=893662

Here is the quotes from this link:

Full content protection is the ability to force a user to be validated when the user requests any content from the Web server. By default, only .aspx pages require you to be validated when using forms authentication. If you have a .pdf file or a .jpg file, the URL can be sent in an e-mail or copied and pasted into a browser, and the content will be served regardless of whether or not you have been validated.
0
 
dbedooAuthor Commented:
Thanks, I did find an alternative solution ... the files no longer need to reside in the wwwroot so i plan on streaming the pdfs.  Good articles  thanks!!
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now