I am using an ASP Login control to authenticate users, however even if the user doesn't check the 'Remember Me' check box the user will not be forgotten, even if they close thei开发者_如何学编程r browser, shutdown their PC and open it up again.
Authentication is:
<authentication mode="Forms">
<forms name=".ASPXFORMSAUTH" loginUrl="~/Default.aspx" timeout="3600" protection="All" />
</authentication>
Has anyone else had this problem?
The timeout
setting is the number of minutes before the cookie expires.
The default value for this is 30.
Your sessions are remaining open for 3600 minutes.
I have had issues with form authentication in .NET. I have had to add a Session.Clear(); Session.Abandon(); in the Global.asax in the Session_End
精彩评论