Web.config hacks around ASP.NET Forms Authentication pain points!

This and this touch on how to open up permissions in a folder full of stylesheets and/or images (or even .js files) so that a user may see the images and the effects of the stylesheets without being logged in. The trick is to put a Web.config file inside of the folder full of content you wish to expose to everyone in all circumstances which has this in it:

<configuration>
   <system.web>
      <authorization>
      <allow users="*"/>
      </authorization>
   </system.web>
</configuration>

 
 

This tells us the following is required just to get an application with forms authentication to run in IIS.

<system.webServer>
   <validation validateIntegratedModeConfiguration="false"/>
</system.webServer>