c# - Is authentication done by IIS before HttpApplication.AddOnAuthenticateRequestAsync event is raised -
i newbie in iis , authentication/authorization world. working on implementing user token session cache users have been authenticated once (with ttl entry) in our application. see events can raised on addonbeginrequestasync , addonauthenticaterequestasync in httpmodule. using windows authentication. have 3 questions in regard :
has request being authenticated when begineventhandler addonauthenticaterequestasync raised ?
how can ask iis forgo authentication users (using auth cache generate). can perform check in begineventhandler beginrequest.
for telemetry aggressive users bad credentials, how can username failed authenticated requests. able fetch information logrequest event ?
it great if can point articles/docs read well.
thanks
Comments
Post a Comment