0

I'm working on an upgrade to Sitecore 10.0.1, but I've also checked this in 10.1, and I've tried this in clean XP0 environments after it blew up in my upgrade site, to take all of the extra pipelines out.

These are the reproduction steps:

  1. In the App_Config/Sitecore/CMS.Core/Sitecore.Sites.config, add this to the website site definition: requireLogin="true" loginPage="/login"
  2. Log into the CM and go to content editor. Create a page under the default Home item (/sitecore/content/Home) using the Sample Template and call it "Login" and publish
  3. In an incognito window, browse the front-end site homepage. Note the site redirects to the /login page with a ReturnUrl querystring. This is the expected behavior.
  4. Go back to the CM and create an MVC Layout (the default sample layout is still using web forms), creating an appropriate CSHTML file to go with it. For example, I created /Views/Layouts/Base.cshtml with bare-bones markup and a placeholder for "main"
  5. Assign this new layout to the Home and Login items and publish
  6. Go back to the front-end homepage and reload. You should observe the infinite loop with a 404.15 error, although the URL in 10.1 reads a little different/neater than the 10.0.1 version. (See below.)

I didn't plan to go through identity server for this since I already have a custom login page; Sitecore had suggested adding something like this to Sitecore.Owin.Authentication.config:

<mapEntry name="members site" type="Sitecore.Owin.Authentication.Collections.IdentityProvidersPerSitesMapEntry, Sitecore.Owin.Authentication" resolve="true">
  <sites hint="list">
    <site>members</site>
  </sites>
  <identityProviders hint="list:AddIdentityProvider">
    <identityProvider ref="federatedAuthentication/identityProviders/identityProvider[@id='SitecoreIdentityServer']" id="SitecoreIdentityServer" />
  </identityProviders>
</mapEntry>

This doesn't seem like the correct behavior, but perhaps it is because of identity server and there's some extra wiring I'm missing?

10.0.1: https://sc10testsc.dev.local/login?ReturnUrl=%2flogin%3fReturnUrl%3d%252flogin%253fReturnUrl%253d%25252flogin%25253fReturnUrl%25253d%2525252flogin%2525253fReturnUrl%2525253d%252525252flogin%252525253fReturnUrl%252525253d%25252525252flogin%25252525253fReturnUrl%25252525253d%2525252525252flogin%2525252525253fReturnUrl%2525252525253d%252525252525252flogin%252525252525253fReturnUrl%252525252525253d%25252525252525252flogin%25252525252525253fReturnUrl%25252525252525253d%2525252525252525252flogin%2525252525252525253fReturnUrl%2525252525252525253d%252525252525252525252flogin%252525252525252525253fReturnUrl%252525252525252525253d%25252525252525252525252flogin%25252525252525252525253fReturnUrl%25252525252525252525253d%2525252525252525252525252flogin%2525252525252525252525253fReturnUrl%2525252525252525252525253d%252525252525252525252525252flogin%252525252525252525252525253fReturnUrl%252525252525252525252525253d%25252525252525252525252525252flogin%25252525252525252525252525253fReturnUrl%25252525252525252525252525253d%2525252525252525252525252525252flogin%2525252525252525252525252525253fReturnUrl%2525252525252525252525252525253d%252525252525252525252525252525252flogin%252525252525252525252525252525253fReturnUrl%252525252525252525252525252525253d%25252525252525252525252525252525252flogin%25252525252525252525252525252525253fReturnUrl%25252525252525252525252525252525253d%2525252525252525252525252525252525252flogin%2525252525252525252525252525252525253fReturnUrl%2525252525252525252525252525252525253d%252525252525252525252525252525252525252flogin%252525252525252525252525252525252525253fReturnUrl%252525252525252525252525252525252525253d%25252525252525252525252525252525252525252flogin%25252525252525252525252525252525252525253fReturnUrl%25252525252525252525252525252525252525253d%2525252525252525252525252525252525252525252flogin%2525252525252525252525252525252525252525253fReturnUrl%2525252525252525252525252525252525252525253d%252525252525252525252525252525252525252525252flogin%252525252525252525252525252525252525252525253freturnUrl%252525252525252525252525252525252525252525253d%25252525252525252525252525252525252525252525252f

10.1: https://sitecore101sc.dev.local/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?ReturnUrl=/login?returnUrl=%2525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252525252f

0

Browse other questions tagged or ask your own question.