I am using Asp.net identity membership. This is Startup.Auth.cs code :
app.UseCookieAuthentication(new CookieAuthenticationOptions
{
AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
LoginPath = new PathString("/Account/Login"),
ExpireTimeSpan = TimeSpan.FromMinutes(45),
Provider = new CookieAuthenticationProvider
{
// Enables the application to validate the security stamp when the user logs in.
// This is a security feature which is used when you change a password or add an external login to your account.
OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, User>(
validateInterval: TimeSpan.FromMinutes(30),
regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager))
}
});
As you can see i've set 45 minutes and it generates Asp.Net.ApplicationCookie, but Users are logging out about in ten minutes if they are inactive(not send http request). Asp.Net.ApplicationCookie still exists but it's invalid(after ten minutes) . Why it's invalid after ten minutes does not supposed to be after 45 minutes?