ok, I have my logging working, my user auth working, getting the users roles, etc. however, I want to lock down all of my pages so that the user has to be logged in to access the page.
When I put this on my master page
protected void Page_Load(object sender, EventArgs e)
{
if(User.identity.isauthenticated)
{
//continue to load the default.aspx page, etc
}
else
{
redirect to the login page
}
}
and when it goes back to the login page, it just stays there, and doesn't redirect the user back to the default page.
so how can i lock down all pages, and check to see if the user is authorized on every page, even the master page so they can't bookmark a page and keep accessing it without logging in?
...
Go to the complete details ...