Question

The way I have it now, Default.aspx is empty and has a code behind to Default.aspx.cs, which either redirects them to Login.aspx or Home.aspx depending on if the request is authenticated or not.

Default.aspx is just out there doing nothing. It just seems like there ought to be a more elegant approach to this.

Any ideas would be great!

Answer 1

In my opinion, the most elegant way to do this is to make use of web.config. You can specify, the login page here that the unauthenticated user will automatically be redirected to:

<authentication mode="Forms">
  <forms loginUrl="~/Login/LogOn.aspx" />
</authentication>
<authorization>
  <deny users="?"/>
</authorization>

Apart from this, you can also specify which users are granted access to pages in current folder through the authorization tag.