Re: Re-Authenticate users after timeout

From: Brock Allen (ballen_at_NOSPAMdevelop.com)
Date: 03/31/05 

Date: Thu, 31 Mar 2005 04:25:05 -0800

Look into using Forms authentication which manages all of this for you, rather
than you doing it manually with Session variables.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconthecookieauthenticationprovider.asp

-Brock
DevelopMentor
http://staff.develop.com/ballen

> Hi,
>
> I'm working on a web application using asp.net, vb.net and SQL 2000.
>
> I'm using web form authentication to control the access of the
> application. I'm trying to force the user to go back to the
> authentification page after a timeout occurs.
>
> The Session seems to expire but the cookie (non persistent) is still
> active.
>
> What can I do to force the user to re-authenticate after a timeout.
>
> Thanks,
>
> Fred
>

Relevant Pages

  • Re: Problem with Session Variable
    ... Check out the authentication part of your web ... You can get a first impression by reading ... User A signs in and the screen shows that the userid is "User A". ... > session variables in the Session_start event is loopy! ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: When exactly are you logged in? (Forms authentication)
    ... Actually, I think you can, eg using the mobile internet stuff ... FormsAuthentication doesn't let you just redirect with the authentication ... and checking for it in the global.asax "Global_AcquireRequestState" handler ... The 'cost' would be two session variables per user - ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • PEAR auth package - how does setSessionname work?
    ... I have used the PEAR Auth package to successfully set up authentication. ... // Details of where the authentication details are stored. ... Now I know I can uniquely name the $_SESSION variables which will probably ...
    (comp.lang.php)
  • Re: logging off (without getting page when click on back )
    ... If you are using Forms Authentication, ... Auth use so a new session will be started whenever ... If you are relying on session variables only, ... very secure mechanism to handle authentication. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: lack of understanding of principals, identities, and context
    ... Other thing when it is used would be when you use role-based authentication. ... checked if Request.IsAuthenticated=true (login cookie exists in case Forms ... >> HttpContext is request specific and ... > It would not be too heavy (only involving two or three session variables, ...
    (microsoft.public.dotnet.framework.aspnet.security)