Securing elmah.axd with ASP.Net Web API

125 views
Skip to first unread message

lobby_lobsbourne

unread,
May 26, 2015, 5:04:44 AM5/26/15
to el...@googlegroups.com
Hello,

i got a web service written with ASP.Net Web API 2 hosted as an azure website. We implemented our own authenticationhandler and an authorizationfilter. After going through every step in SecuringErrorLogPages i didn't manage to secure elmah.axd at all. The authenticationhandler never gets hit...and since its a web api i can't use forms authentication.

Is there another possibility to secure access without using forms authentication?

Thanks in advance!





Atif Aziz

unread,
Jun 2, 2015, 3:15:58 PM6/2/15
to el...@googlegroups.com
An authentication handler based on the Web API pipeline will only be invoked when the Web API is in effect. For securing other resources like ELMAH's pages, you should set up an authentication module at the IIS level if that is your web host.

- Atif

--
You received this message because you are subscribed to the Google Groups "ELMAH" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elmah+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages