How to configure/implement inactive session timeout #888

6 إجابة (إجابات)

• 

  1

  Moyaoxiang خلقت منذ 3 أعوام

  Hi nhontran, Perhaps you can set the relative expiration parameters of the cookie.

  • https://docs.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.authentication.cookies.cookieauthenticationoptions.slidingexpiration?view=aspnetcore-5.0
  • https://stackoverflow.com/questions/38983173/asp-net-identity-slidingexpiration-set-to-true-does-not-re-issues-cookie

  يحفظ يلغي
• 

  0

  nhontran خلقت منذ 3 أعوام

  Hi @Moyaoxiang, thanks for your prompt reply.

  I have tried but it does not seem work, I set the ExpireTimeSpan = 10 mins and SlidingExpiration = true, then I left the application inactive for 11 mins, it did not force me to re-login, I was still able to using it.

  context.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                  .AddJwtBearer(options =>
                  {
                      options.Authority = configuration["AuthServer:Authority"];
                      options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]);
                      options.Audience = "TestingApplication";
                  })
                  .AddCookie("Cookies", options =>
                  {
                      options.ExpireTimeSpan = TimeSpan.FromMinutes(10);
                      options.SlidingExpiration = true;
                  });
  

  يحفظ يلغي
• 

  0

  nhontran خلقت منذ 3 أعوام

  Hi @Moyaoxiang, do you have any idea why it does not work?

  يحفظ يلغي
• 

  0

  nhontran خلقت منذ 3 أعوام

  Hi, we still could not make it work, is there anyone can advise on this?

  يحفظ يلغي
• 

  0

  Moyaoxiang خلقت منذ 3 أعوام

  Hi nhontran, As Issue 975 said, Angular uses JWT for authentication and cannot actively log out on the front end. Currently JWT is issued through Identity Server 4. Perhaps you can change the LifeTime of AccessToken in Identity Data Seeder. This is the documentation: http://docs.identityserver.io/en/latest/reference/client.html

  يحفظ يلغي
• 

  0

  ServiceBot خلقت منذ عامين

  فريق الدعم Automatic process manager

  This question has been automatically marked as stale because it has not had recent activity.

  يحفظ يلغي