iis - Force SSL with exceptions in web.config -

i have following in web.config force ssl, need exclude specific paths being forced.

<?xml version="1.0" encoding="utf-8"?> <configuration>     <system.webserver>         <rewrite>             <rules>                 <rule name="redirect https http" stopprocessing="true">                     <match url="(.*)" />                     <conditions>                         <add input="{https}" pattern="^off$" />                     </conditions>                     <action type="redirect" url="https://{http_host}/{r:1}" redirecttype="seeother" />                 </rule>             </rules>         </rewrite>     </system.webserver> </configuration> 

i've tried changing match url have specific path inverted appears not caught.

examples:

site.com/app/default.aspx - force ssl site.com/app/service/cashback.svc - not forced, http site.com/app/service/different.svc - force ssl (so it's not full directory has excluded)

you can add exceptions <conditions>, e.g.

<add input="{request_uri}" matchtype="pattern" negate="true" pattern="/app/service/cashback\.svc" />