How can I implement these scenarios using forms authentication?
If the user is Inactive for 40mins, he has to be logged out completely.
Questions
- How should I set Session timeout ?
- How to Manage application timeout vs. session timeout?
Add a comment |
1 Answer
If the user has to enter password; he is essentially logged out. You can set session timeout to 20.
However if you really want to differentiate between the two you can update session item with last time user made a request. Set the session time out to 40 minutes. At any given time if the session last update entry is older than 20 minutes ask him to enter password again.
See the following for executing code before every request in MVC
answered Apr 4, 2012 at 18:30
Muhammad Hasan Khan
35.2k16 gold badges93 silver badges132 bronze badges
1 Comment
Brad
where should I write the code related to saving the Session["lastrequest"] in the application . and how should I assign the time to the Session["lastrequest"]