Protect Classic ASP Page within an ASP.NET Application

Question

I would like to restrict access to a classic asp page that is contained within an ASP.NET application that uses Forms Authentication.

Is there a way to configure forms authentication so that it will restrict access to these pages? I have the following in my web.config.

<location>
    <system.web>
      <authorization>
        <deny users="?" />
      </authorization>
    </system.web>
</location>

I am running in 'classic' pipeline mode and I don't have the option of switching to 'integrated'.

Answer 1

Start here:

http://weblogs.asp.net/scottgu/archive/2007/03/04/tip-trick-integrating-asp-net-security-with-classic-asp-and-non-asp-net-urls.aspx

Answer 2

One option would be to embed the pages in an ASP.NET page using Server.Execute. This approach should allow you to incorporate authentication into the legacy ASP pages.