locked
wanting to force https on handler definition RRS feed

  • Question

  • User300685930 posted

    I have a handler defined as follows:

    <handlers>

    <add name="CooliteHandler" path="*/coolite.axd" verb="*" type="Coolite.Ext.Web.ResourceManager" />

    How can I force https connection on anything going through this handler?  I'm using the SecureWebpages security project which gives me a setup like this:

    <secureWebPages mode="RemoteOnly" ignoreHandlers="WithStandardExtensions">

    <files>

    <add path="Login.aspx" />

    </files>

    <directories>

    <add path="coolite" recurse="True" />

    It works correclty for physical directories, but does not seem to for this "virtual" path.

    Tuesday, December 16, 2008 12:26 PM

All replies

  • User1622957740 posted

    Couldn't you check for Request.IsSecureConnection in the actual handler itself and then either redirect to the same page in https? Not as configurable, but easy enough to handle...

    +++ Rick ---

    Tuesday, January 6, 2009 1:48 PM