3

I am trying to complete login redirect functionality. I prohibited read/write access for default/anonymous for mysite.org/security-page and added NoAccessUrl <setting name="NoAccessUrl" value="/login" />setting. When user visit this page I have an error: error The same error occurs when trying redirect to /404 page.

Improve this question

1 Answer 1

Reset to default
2

This issue can be caused by modified setting

<setting name="RequestErrors.UseServerSideRedirect" value="false" />

which is false by default.

According to notes in config file If true, Sitecore will use Server.Transfer instead of Response.Redirect. But Server.Transfer is not good option for regular login page redirect because:

ASP.NET does not verify that the current user is authorized to view the resource delivered by the Transfer method. (https://msdn.microsoft.com/en-us/library/y4k58xk7.aspx).

Improve this answer
2
  • 4
    Please elaborate on this answer. As it stands, it does not provide sufficient context or explanation.
    – Mark Cassidy
    Nov 17, 2016 at 10:02
  • 1
    yes it was patch config which override this setting. but could you please explain how it influence to redirect process?
    – Vlad
    Nov 17, 2016 at 11:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.