How to allow authorization for a single page only

Yep - the issue of being redirected to the login page may be related to the interaction between the FriendlyURL package and the <location> path specified in your web.config. FriendlyURL rewrites the URLs to be more user-friendly (e.g., turning documents/mobile-upload/{clientid} into a cleaner format). However, this rewritten path might not match the exact path you've defined in the web.config file.

Try updating the <location> path to Match FriendlyURL Mappings. If FriendlyURL rewrites Documents/Mobile.aspx into documents/mobile-upload/{clientid}, your <location> element in web.config might not recognize the rewritten path. To fix this, you should configure your authorization rules in the rewritten format.

1. For example

      <location path="documents/mobile-upload">
       <system.web>
           <authorization>
               <allow users="*"/>
               <deny users="?"/>
           </authorization>
       </system.web>
   

</location>

   
1. Add Exception in `Global.asax` or Middleware. If FriendlyURL rewrites the paths dynamically and you're unsure of the exact paths, you can add custom rules in your `Global.asax` or middleware to allow access to unauthenticated users for specific rewritten URLs:

   ```csharp
   protected void Application_BeginRequest(object sender, EventArgs e)
{
    var path = HttpContext.Current.Request.AppRelativeCurrentExecutionFilePath.ToLower();
    if (path.StartsWith("~/documents/mobile-upload"))
    {
        // Allow unauthenticated access for this path
        HttpContext.Current.SkipAuthorization = true;
    }
}

1. Check how the FriendlyURL package rewrites your paths. You can override or exclude certain routes to prevent redirection issues:

      routes.MapPageRoute(
       "MobileUpload",
       "documents/mobile-upload/{clientid}",
       "~/Documents/Mobile.aspx"
   

);

   
1. Verify that the rules in your `web.config` are not conflicting. For example:

   - Place general rules (e.g., deny all users) outside specific `<location>` elements.
   
      - Use `<allow users="*"/>` to permit access for all users.
      
   For example:
   
   ```xml
   <configuration>
    <system.web>
        <authorization>
            <deny users="*"/>
        </authorization>
    </system.web>

    <location path="documents/mobile-upload">
        <system.web>
            <authorization>
                <allow users="*"/>
            </authorization>
        </system.web>
    </location>
</configuration>

1. Ensure that forms authentication in web.config is properly configured:

   <authentication mode="Forms">
    <forms loginUrl="~/Login.aspx" timeout="30" />
</authentication>

If unauthenticated users are still being redirected, there might be a global rule enforcing redirection.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin