Groups | Blog | Home
all groups > asp.net security > september 2007 >

asp.net security : authentication timeout so fast


Mark Fitzpatrick
9/25/2007 6:50:17 PM
Within the <authentication> config element, there's also a <forms> config
element. That's where the timeout can be changed and currently defaults to
30 minutes. Also, there's a slidingExpiration attribute as well. make sure
this is set to true as that will constantly update their timeout whenever
they browse to a new page.

If you're using session variables, make sure the session timeout is longer
than the forms timeout, that way their session will expire just after their
authentication ticket expires or else you could be loosing session data
while they're still logged in.


--
Hope this helps,
Mark Fitzpatrick
Microsoft MVP - FrontPage


[quoted text, click to view]

ascll
9/25/2007 11:35:49 PM
Greetings,

I'm using the normal <authentication mode="Forms"/> in conjunction with
"Login" template (provided by Asp.NET 2.0) to authenticate users on my
protected pages.

The problem is the timeout session seems to be too fast tomeout even my
users still in the midst of inserting the data, and they have to login again
and then start over to insert the data.

Anywhere I can configure to "extend" the default timeout period?

Thanks
ascll

AddThis Social Bookmark Button