Unfortunately the GetXmlDocumentByUrl() method is very naive, so it doesn't know anything about how to authenticate. I think copying the method and adding the currently existing cookies like this might work: http://stackoverflow.com/questions/5443667/httpwebrequest-pass-credentials-to-next-httpwebrequest

Thanks Sebastiaan,

Sounds like it could do the trick -- I'll give it a go!

/Chriztian

Sad Panda :(

Can't get it to work...

I'm doing this (thanks to @k_h_schneider):

public static XPathNodeIterator GetXmlDocumentByUrl(string Url)
{
    XmlDocument xmlDoc = new XmlDocument();
    HttpWebRequest request = (HttpWebRequest)WebRequest.Create(Url);
    request.CookieContainer = new CookieContainer();
    try {
        foreach (HttpCookie cookie in HttpContext.Current.Response.Cookies) {
            request.CookieContainer.Add(new Cookie(cookie.Name, cookie.Value, cookie.Path, cookie.Domain));
        }

        HttpWebResponse response = (HttpWebResponse)request.GetResponse();
        Stream responseStream = response.GetResponseStream();
        XmlTextReader reader = new XmlTextReader(responseStream);

        xmlDoc.Load(reader);

        response.Close();
        responseStream.Close();

    } catch (Exception err) {
        xmlDoc.LoadXml(string.Format("<error url=\"{0}\">{1}</error>", HttpContext.Current.Server.HtmlEncode(Url), err));
    }

    XPathNavigator xp = xmlDoc.CreateNavigator();
    return xp.Select("/");
}

The request still gets sent to the login page.

Anyone else got an idea? (My Plan B is to have the request go "outside" of the protected section of the site and then link them using a token of some sorts...

/Chriztian

is working on a reply...