If I can do this with ISAPI rewrite, why can't I set up a page that writes
a header to itself so that it caches the userinformation?

> Bob,
>
> Okay, this is pure theory... I haven't actually tested it, so it might
> not work at all.
>
> (1) Change your URLs from http://#username#:[EMAIL PROTECTED]/ to
> http://foo.com/auth/#ToBase64(username & ":" & password)#/
>
> (2) Install ISAPI Rewrite
>
> (3) Create a rewrite condition that looks for /auth/(.*)/
>
> (4) If authorization info is found, rewrite the URL to omit the auth
> info, and then set the Authorization header to the base64 string in
> the original URL
>
> Again, *in theory*, you'll end up being able to authenticate without
> user intervention.
>
> --
> Roger Benningfield
> JournURL: http://journurl.com/
> blog: http://admin.support.journurl.
com/
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to