ASHX HTTP Handlers and forms authentication

Question

I have an ashx handler that I use to upload files from a flex page. I have been unable to extend forms authentication to protect the ashx file. Is there anyway to do this?

Answer 1

You can always check context.Request.IsAuthenticated in your .ashx file. (link)

Answer 2

You could ways add a web.config file in the same directory as the ashx file with the following contents (i think):

  <?xml version="1.0" encoding="utf-8" ?>
  <configuration>

    <system.web>

      <authorization>
        <deny users="?"/>
      </authorization>

    </system.web>
  </configuration>