Re: Forms authorization cookie always set to expire in 2055?

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 07/23/05


Date: Fri, 22 Jul 2005 15:49:17 -0700

Hello Amil,

you seem to set a persistent cookie somewhere - maybe you pass in a 'true'
as the second parameter in FormsAuthentication.RedirectFromLoginPage ??

the default expiration value is 50 years and would match your 2055 observation.
http://www.leastprivilege.com/PermaLink.aspx?guid=98fbac3a-faad-49e6-b2e7-db179355168a

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I'm using Forms authorization. In my <forms> section I have
> timeout="30", but when I examine the cookie, it shows it expiring in
> 2055? Why?
>
> <authentication mode="Forms">
> <forms
> loginUrl="/login.aspx"
> protection="All"
> timeout="30"
> path="/">
> <credentials passwordFormat="Clear">
> <user name="guest" password="xxxxxxx" />
> </credentials>
> </forms>
> </authentication>



Relevant Pages

  • RE: RedirectFromLoginPage persistent cookie expiration
    ... Regarding the RedirectFromLoginPage - persistent cookie, you can control the ... expiration date, it is also a good practice too.. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Need Help with cookies
    ... That's called a persistent cookie as I tried to explain and as I recall it ... And another thing you mistakenly assumed, a persistent cookie does not need ... a date of expiration set a year into the future as you stated. ... Prev by Date: ...
    (microsoft.public.dotnet.framework.aspnet)
  • RedirectFromLoginPage persistent cookie expiration
    ... Passing true for the second parameter of RedirectFromLoginPage creates a ... persistent cookie. ... When does this cookie expire? ...
    (microsoft.public.dotnet.framework.aspnet.security)