I tried to change the token lifetime before.
Hi maliming
Yes, it still happen if the computer was not sleeping. I have a feeling I'll never be logged out if I still open browser. If I close browser and waiting for timeout then reopen the browser, I get the login page.
I had set AccessTokenLifetime and AbsoluteRefreshTokenLifetime to 1 minute.
I see the refresh token api in the network, one of them fails with invalid_grant (so can not get new token), then a few second some api get error, then I refresh the page (press f5) and I can still access to the system without logout.
I also tried setting expire time for cookies, but it not work .AddCookie("Cookies", options => { options.ExpireTimeSpan = TimeSpan.FromMinutes(1); options.SlidingExpiration = true; });
Thanks Mehmet I will upgrade my solution, will let you know the result later.
Hi Mehmet
After upgrade to the v4.4.0, the login button will be appeared in the navbar when the token expires. But when I click to this button, I can access to the system without login.
Is there a way for the system to redirect to the login page when the token expires?
Hi @Mehmet, Do you have any updates for this, or is there a new version that has addressed this?
