IIS Rewriting URL

[lucianomelotti]

I have a problem with an installation on an IIS server.
The web.config file in the documentation does not contain the same rules as the .htaccess file and if I insert the file inserted in the documentation and go to the IIS configuration panel, errors are seen.

So I tried to convert the .htaccess file with the tool provided by Microsoft. But at this point all assets are no longer reachable. It seems that the rule

<rule name="Winter CMS to handle all non-whitelisted URLs" stopProcessing="true">
      <match url="^index.php" negate="true" />
      <conditions logicalGrouping="MatchAll">
          <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" />
          <add input="{REQUEST_FILENAME}" pattern="/.well-known/*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/storage/app/uploads/public/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/storage/app/media/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/storage/app/resized/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/storage/temp/public/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/themes/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/plugins/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
          <add input="{REQUEST_FILENAME}" pattern="/modules/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
      </conditions>
      <action type="Rewrite" url="index.php" />
  </rule>

always applies.

This is the complete file obtained with Microsoft's conversion tool

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
                <rule name="Regola-bootstrap" stopProcessing="true">
                    <match url="^bootstrap/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-config" stopProcessing="true">
                    <match url="^config/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-vendor" stopProcessing="true">
                    <match url="^vendor/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-storage/cms" stopProcessing="true">
                    <match url="^storage/cms/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-storage/logs" stopProcessing="true">
                    <match url="^storage/logs/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-storage/framework" stopProcessing="true">
                    <match url="^storage/framework/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-storage/temp/protected" stopProcessing="true">
                    <match url="^storage/temp/protected/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Regola-storage/app/uploads/protected" stopProcessing="true">
                    <match url="^storage/app/uploads/protected/.*" />
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Winter CMS to handle all non-whitelisted URLs" stopProcessing="true">
                    <match url="^index.php" negate="true" />
                    <conditions logicalGrouping="MatchAll">
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" />
                        <add input="{REQUEST_FILENAME}" pattern="/.well-known/*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/uploads/public/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/media/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/resized/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/temp/public/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/themes/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/plugins/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/modules/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                    </conditions>
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Block all PHP files, except index" stopProcessing="true">
                    <match url="^index.php" negate="true" />
                    <conditions logicalGrouping="MatchAll">
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" />
                        <add input="{REQUEST_FILENAME}" pattern="\.php$" ignoreCase="false" />
                    </conditions>
                    <action type="Rewrite" url="index.php" />
                </rule>
                <rule name="Standard routes" stopProcessing="true">
                    <match url="^" ignoreCase="false" />
                    <conditions logicalGrouping="MatchAll">
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
                    </conditions>
                    <action type="Rewrite" url="index.php" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>
</configuration>

Can you help me to understand where the problem is?

[bennothommo]

@lucianomelotti The IIS config contains all the white-listed folders that the .htaccess file provides. The intent of that IIS config is to route all requests to index.php - therefore allowing Winter to handle the request - unless they go to one of the white-listed folders.

The .htaccess file only has extra rules to prevent access to certain folders due to the way that .htaccess works, but they shouldn't be needed with an IIS instance.

[lucianomelotti]

But the syntax of the conditions in the white-listed folders are not correct.
For example in this row
<add input="{REQUEST_FILENAME}" matchType="IsFile" pattern="^/.well-known/*" negate="true" />
the matchType option is set for a file but you specified a pattern. If I open this condition in IIS panel it appears as invalid. If I save the condition in IIS manager the results on my file is
<add input="{REQUEST_FILENAME}" matchType="IsFile" />
and the application doesn't work.
If I correct the conditions with the correct syntax
<add input="{REQUEST_FILENAME}" matchType="Pattern" pattern="^/.well-known/*" negate="true" />
the application doesn't work.

[bennothommo]

Unfortunately I don't have an IIS instance to test this against at the moment. If you are able to investigate and suggest a fix to the config, we can update the docs.

[lucianomelotti]

@bennothommo This is the right web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
                <rule name="Winter CMS to handle all non-whitelisted URLs" stopProcessing="true">
                    <match url="^index.php" negate="true" />
                    <conditions logicalGrouping="MatchAll">
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/.well-known/*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/uploads/public/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/media/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/app/resized/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/storage/temp/public/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/themes/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/plugins/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                        <add input="{REQUEST_FILENAME}" pattern="/modules/.*/(assets|resources)/.*" ignoreCase="false" negate="true" />
                    </conditions>
                    <action type="Rewrite" url="index.php" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>
</configuration>

[LukeTowers]

Thanks @lucianomelotti, I've made the change to the recommended IIS configuration in the docs. I was never happy with ours, so that helps us out!