What is different between forms Authentication timeout vs session timeout in Asp.net application?

Question

What is different between session timeout and forms timeout property

 <authentication mode="Forms">
      <forms protection="All" slidingExpiration="true" defaultUrl="Administrator/Default.aspx" loginUrl="login" timeout="180" >
      </forms>
    </authentication>
    <sessionState timeout="300">
    </sessionState>

how differ <forms> timeout vs <sessionstate> timeout properties in web.config file.?

Thanks

Timbo · Accepted Answer · 2011-09-15 10:05:15Z

1

The forms timeout is the inactivity timeout for forms authentication (or absolute timeout if you're not using sliding expiration).

Sessionstate timeout is the inactivity timeout for the user's session data - e.g. any session data you store for that user.

answered Sep 15, 2011 at 10:05

Timbo

4,5532 gold badges29 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

Bernie White Over a year ago

The forms timeout is specifically the cookie timeout before reauthentication is required by the user. This works different under different ASP versions. See msdn.microsoft.com/en-us/library/1d3t3c61.aspx

Abhishek B. Over a year ago

Hello @Bernie, Some time my application shows the redirection loop error.. what's the issue.?

Timbo Over a year ago

@AbhishekBhalani this is sometimes because your login page requires authentication. Perhaps users log in from the home page but when their session times out it redirects them to a page that requires authentication? Generally need more information to help with this, though. Probably needs a separate question...

Bernie White Over a year ago

@Abhishek Are you successfully authenticating a request? Does the loginUrl login require authentication itself. From the information you have specified you would get redirected to "login" to authenticate then get sent to "Administrator/Default.aspx" after authentication. If the cookie could not be validated at Administrator/Default.aspx and the page requires authentication you would get sent back to login.

Abhishek B. Over a year ago

ok @Timbo .. Is it mandatory to setAuthentication cookies when validate user.

|

Collectives™ on Stack Overflow

What is different between forms Authentication timeout vs session timeout in Asp.net application?

1 Answer 1

8 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

8 Comments

Your Answer

Sign up or log in

Post as a guest

Related