How to configure/implement inactive session timeout #888

6 Answer(s)

• 

  1

  Moyaoxiang created 5 years ago

  Hi nhontran, Perhaps you can set the relative expiration parameters of the cookie.

  • https://docs.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.authentication.cookies.cookieauthenticationoptions.slidingexpiration?view=aspnetcore-5.0
  • https://stackoverflow.com/questions/38983173/asp-net-identity-slidingexpiration-set-to-true-does-not-re-issues-cookie

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  nhontran created 5 years ago

  Hi @Moyaoxiang, thanks for your prompt reply.

  I have tried but it does not seem work, I set the ExpireTimeSpan = 10 mins and SlidingExpiration = true, then I left the application inactive for 11 mins, it did not force me to re-login, I was still able to using it.

  context.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                  .AddJwtBearer(options =>
                  {
                      options.Authority = configuration["AuthServer:Authority"];
                      options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]);
                      options.Audience = "TestingApplication";
                  })
                  .AddCookie("Cookies", options =>
                  {
                      options.ExpireTimeSpan = TimeSpan.FromMinutes(10);
                      options.SlidingExpiration = true;
                  });
  

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  nhontran created 5 years ago

  Hi @Moyaoxiang, do you have any idea why it does not work?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  nhontran created 5 years ago

  Hi, we still could not make it work, is there anyone can advise on this?

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  Moyaoxiang created 5 years ago

  Hi nhontran, As Issue 975 said, Angular uses JWT for authentication and cannot actively log out on the front end. Currently JWT is issued through Identity Server 4. Perhaps you can change the LifeTime of AccessToken in Identity Data Seeder. This is the documentation: http://docs.identityserver.io/en/latest/reference/client.html

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel
• 

  0

  ServiceBot created 5 years ago

  Support Team Automatic process manager

  This question has been automatically marked as stale because it has not had recent activity.

  Markdown supported.

  Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

  Save Cancel