Recently, I have started a thread about allowing the user to download a file from a Web Server with some kind of protection mechanisms. I didn't have time to proceed more on that at that time and I would like to start a new thread by elaboring more on the situation.
First of all, from my research, it seems I am not the only one with that need. So, if we can find a solution, I am sure other would be able to benefit of it as well.
From a Web site, when a user purchases a specific video (300 - 400 Meg approx.), he is allowed to download it. Now, this process is not new. We have been doing it for a few years now. But, so far, it was only with small files. So, with small files, from a storage directory out of the IIS branch, the file was copied into a temporary directory, under the IIS branch, with a unique file name associated to the user for the download and the file was getting removed about 30 minutes after. But, that scenario is not applicable for a video file having 300 - 400 Meg approx. We cannot transfer the file from one location to another on the server for such need. The file has to remain as is on a directory where the download can kick in.
Here are the facts:
1. The file is big (so, no transfer process can occur on the server for the download preparation as it has to be instant access)
2. We have to avoid asking the user for a user name and a password (the user is already logged, so we won't ask him again)
3. Only the user who purchased the video can download it
Potential scenario:
At first, we thought of creating an account on Windows Server such as WebDownload with a specific password. The directory could have been set up with basic authentication. Then, at the application level, an auto login could be done. The Windows Server account password would have been updated every 24 hours. But, it has been confirmed that it is not possible from WWC/VFP to gain access to the basic authentication recognition automatically as it has to be done manually from the browser.
Some other Web sites have already done that. But, how do they do it?
