Change Password Force Fully Logout Other sessions of that user #6750

3 Answer(s)

• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  You can try to set ValidationInterval of SecurityStampValidatorOptions. The default is 30 minutes.

  If this value is too small, it may affect performance.

  https://learn.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.identity.securitystampvalidatoroptions.validationinterval?view=aspnetcore-8.0

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  dipak.z created 2 years ago

  Any other way because portal is too slow when i put 1 minute

  i have to solve because its show as vulnerability.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  There is no good solution, we can only periodically check in the request if the user has changed the password.

  You can override the SecurityStampValidator.ValidatePrincipalAsync method to validate it yourself in other ways.

  https://github.com/dotnet/aspnetcore/blob/release/8.0/src/Identity/Core/src/SecurityStampValidator.cs#L129-L163

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel