Featured post
cookies - ASP.NET: Does FormsCookie go away when authentication period expires? -
i'm trying establish authentication timeout expiration checking, , i'm noticing little strange. when authentication period still valid, following code give me cookie:
httpcookie authcookie = context.request.cookies[".aspxauth"]; // .aspxauth name defined in web.config
but when authentication period has expired, cookie no longer in cookies array, , result null. i'm trying build formsauthenticationticket
object cookie, able check expired property. this:
formsauthenticationticket authticket = formsauthentication.decrypt(authcookie.value); // check if authenticated session dead if (authticket != null && authticket.expired) { // send response indicating they've expired. }
but if cookie goes away once authentication period has expired, can't far. there i'm doing wrong, or cookie not supposed there? , if not, how supposed build ticket check expired property?
thanks much.
the cookie has expiration timeout value can specify in configuration file. there isn't warning when cookie expires; build process checks upon every request see request expired on.
however, factor in element too, may require valid user (not anonymous), without cookie may kicked out.
read more here: http://support.microsoft.com/kb/910443
- Get link
- X
- Other Apps
Comments
Post a Comment