I am trying to ensure that a page that can be visited from within an app that requires user to be logged in, can be accessed anonymously. A controller has been introduced that can present views as static pages and want to ensure that the targeted page is anonymously accessible. Is there a way to verify that using Fiddler or network tab? Basically want to make sure that there is no details that can trace back to the logged in session.
You've got a few options here on how to test a page that should be viewable without authenticating.
Use a different browser. If you're logged in via Chrome, can you access the static page in Firefox (not logged in)? Browser's cookies do not transfer between different browsers (if your app is using cookies).
Use the browser's incognito/private browsing mode. Like number 1, incognito mode doesn't view cookies, so regardless if you are logged into the site, can you access the static page?
Have access to VPN? You can try accessing the static page via a VPN service.