How to configure/implement inactive session timeout #888

6 उत्तर (ओं)

• 

  1

  Moyaoxiang बनाया था 3 years ago

  Hi nhontran, Perhaps you can set the relative expiration parameters of the cookie.

  • https://docs.microsoft.com/en-us/dotnet/api/microsoft.aspnetcore.authentication.cookies.cookieauthenticationoptions.slidingexpiration?view=aspnetcore-5.0
  • https://stackoverflow.com/questions/38983173/asp-net-identity-slidingexpiration-set-to-true-does-not-re-issues-cookie

  बचाना रद्द करना
• 

  0

  nhontran बनाया था 3 years ago

  Hi @Moyaoxiang, thanks for your prompt reply.

  I have tried but it does not seem work, I set the ExpireTimeSpan = 10 mins and SlidingExpiration = true, then I left the application inactive for 11 mins, it did not force me to re-login, I was still able to using it.

  context.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                  .AddJwtBearer(options =>
                  {
                      options.Authority = configuration["AuthServer:Authority"];
                      options.RequireHttpsMetadata = Convert.ToBoolean(configuration["AuthServer:RequireHttpsMetadata"]);
                      options.Audience = "TestingApplication";
                  })
                  .AddCookie("Cookies", options =>
                  {
                      options.ExpireTimeSpan = TimeSpan.FromMinutes(10);
                      options.SlidingExpiration = true;
                  });
  

  बचाना रद्द करना
• 

  0

  nhontran बनाया था 3 years ago

  Hi @Moyaoxiang, do you have any idea why it does not work?

  बचाना रद्द करना
• 

  0

  nhontran बनाया था 3 years ago

  Hi, we still could not make it work, is there anyone can advise on this?

  बचाना रद्द करना
• 

  0

  Moyaoxiang बनाया था 3 years ago

  Hi nhontran, As Issue 975 said, Angular uses JWT for authentication and cannot actively log out on the front end. Currently JWT is issued through Identity Server 4. Perhaps you can change the LifeTime of AccessToken in Identity Data Seeder. This is the documentation: http://docs.identityserver.io/en/latest/reference/client.html

  बचाना रद्द करना
• 

  0

  ServiceBot बनाया था 2 years ago

  सहायता दल Automatic process manager

  This question has been automatically marked as stale because it has not had recent activity.

  बचाना रद्द करना