Question

In my web.config I have this authentication setting:

<authentication mode="Forms">
            <forms loginUrl="login.aspx" name="signin" path="/" protection="All" timeout="525600">
            </forms>
        </authentication>
<authorization>
            <deny users="?"/>
        </authorization>

For some reason, if I comment it out I can see my website just perfectly with all the assets (js, css, images), but if I uncomment it, none of the assets can be reached, instead it just redirects to login page.

Answer 1

here is a nice in-depth article for you. basically, it says you can configure this in your web.config by adding <location> blocks like so:

<!-- file level access -->
            <location path="default1.aspx">
            <system.web>
            <authorization>
                <allow users ="*" />
            </authorization>
            </system.web>
            </location>
<!--  folder access (and its contents)  -->
            <location path="subdir1">
            <system.web>
            <authorization>
                <allow users ="*" />
            </authorization>
            </system.web>
            </location>
    </configuration>

from this KB article and a bit more info here.