asp.net - Challenge/response challenging on EVERY FILE? -


i have iis 7.5 server running dotnet intranet app. using windows authentication specified in web.config file.

when user first makes call app, can see initial request unauthenticated , receives 401.2, expected. browser request again username , page served 200.

what happens next unexpected, browser requests linked files anonymously , see challenge/response each , every file.

is correct behaviour? have expected subsequent requests authenticated.

edit: works expected using firefox, it's ie8 quirksmode troublesome

this question available on server fault, noone there seems interested: https://serverfault.com/questions/581036/challenge-response-challenging-on-every-file

solved fix in gatapia's comment on own question.

3 requests every resource (2 x 401.2 , 1 x 200) in windows authenticated asp.net mvc app


Comments