asp.net - Session/Cookies Expiration inquiry -
i have .net/.aspx web application basic authentication (through web service third party).
the program flow follows: - user logs in on login page (username , password) - .aspx.cs (codebehind) handles web service authentication. - if user authenticated, set following: httpcontent.current.session["islogged"]=1;
i configured web.config session timeouts using following lines:
< sessionstate timeout="10" cookieless="usecookies"/> < httpcookies httponlycookies="true"/>
based understanding, if no action occurred while logged in within 10 minutes, session expire.
what did far log in on web application close immediately, , didn't accessed web application 20 minutes. when opened web application, still logged in. doing wrong?
my real objective is, when closed web application (or got idled) more 10 minutes, session cookies expired. how can achieve this?
thanks!
Comments
Post a Comment