Error 404 While Accessing Secure Documents

Overview

When testing the use case of accessing documents under Secure folders accessible to the registered users, error 404 is encountered.

The URL format for this use case is as follows:

<sitedomain>/LinkClick.aspx?fileticket=<encryptedfileidstring>&portalid=<portalid>

Back to top


Information

Requirements

  • SEO knowledge

Root Cause

The root cause for the 404 error is the lower-casing of URLs, which in this case causes issues when decrypting the lower-cased value for fileticket parameter.

Back to top


Process

The lower casing is happening Post-Authentication-Module-Processing. To prevent values being converted to lower case string change the URL from:

<sitedomain>/LinkClick.aspx?fileticket=<encryptedfileidstring>&portalid=<portalid>

to:

<sitedomain>/%2fLinkClick.aspx?fileticket=<encryptedfileidstring>&portalid=<portalid>

The above change will cause the URL to encode after being denied by the authentication module and will prevent conversion to lowercase.

Back to top


Comments

0 comments

Article is closed for comments.