Session and user authentication using ASP Identity

Question

I use Asp Identity for Authentication in MVC project, my problem is the session end and the user still authentication in some cases.

I set the time out of OWIN to 20 min on configuration

 app.UseCookieAuthentication(new CookieAuthenticationOptions
            {
                AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
                ExpireTimeSpan = TimeSpan.FromMinutes(20),
                SlidingExpiration = false,
            })

its work after 20 min my session data and Owin is cleared.

but still problem in some cases :

when IIS reset the session clear but the user still authenticated .
when I build my solution on vs 2015 the session clear but the user still authenticated .

have you checked to see if the browser cache has been cleared? — Harry
– Harry, Commented Nov 23, 2015 at 10:54

Community · Accepted Answer · 2017-05-23 10:27:26Z

2

You're using DefaultAuthenticationTypes.ApplicationCookie - cookie authentication.

This is to be expected.. The cookie will live for 20 minutes (as per your configuration) then expire. It has nothing to do with Session

If you really want to tie your authentication to a session, see here: https://stackoverflow.com/a/11420005/131809

I would suggest using an ActionFilter in place of a base class though (as mentionedi n one of the comments)

edited May 23, 2017 at 10:27

CommunityBot

11 silver badge

answered Nov 23, 2015 at 11:12

Alex

38.6k55 gold badges217 silver badges340 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Session and user authentication using ASP Identity

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related