SessionState TimeOut is not working Properly

Question

I wanna Prevent auto logout from website for 1 day, the solution that I found is

<sessionState mode="InProc" cookieless="false" timeout="1440" />

notice that my authentication mode is none <authentication mode="None" />

Set in my Web.config > system.web tag

I also Used

<authentication mode="Forms">
<forms loginUrl="SignIn.cshtml" protection="All" path="/SignIn" timeout="1440" />
</authentication>

but its not working and authentication expire after 20-30 min and need to login again. any body can help? Is there any other config that I should set?

score 0 · Answer 1 · answered Oct 13 '18 at 09:02

0

Use this configuration in your web config file

<configuration>
   <system.web>
   <sessionState timeout="20"></sessionState>
   </system.web>
</configuration>

answered Oct 13 '18 at 09:02

rykamol

1,097
1
10
19

Thanks bt, as I said its not working.. I even set ( mode="InProc" cookieless="false" ) to make sure about default attributes.. – r.enayati Oct 13 '18 at 09:08

Mohsin Mehmood · Answer 2 · 2018-10-13T09:42:19.237

0

There are two timeouts Authentication timeout vs Session timeout. For authentication timeout value set timeout property on <forms> element in web.config.

Check following SO posts:

Forms authentication timeout vs sessionState timeout

Forms Authentication Timeout vs Session Timeout

edited Oct 13 '18 at 09:42

answered Oct 13 '18 at 09:30

Mohsin Mehmood

4,156
2
12
18

Thanks! I Edited the question according to my requirement. – r.enayati Oct 13 '18 at 10:47
If your authentication mode is none then how are your users authenticated? – Mohsin Mehmood Oct 13 '18 at 11:36
Im using a simple form and jquery for pass parameters to account controller and `SignInManager.PasswordSignInAsync` authorise user.. – r.enayati Oct 14 '18 at 05:16
I used this code but it didnt work also ` ` – r.enayati Oct 14 '18 at 12:01
Please check if you have method call `app.UseCookieAuthentication` in your code. If yes, set `ExpireTimeSpan` property. For information check: https://www.jamessturtevant.com/posts/ASPNET-Identity-Cookie-Authentication-Timeouts/ – Mohsin Mehmood Oct 14 '18 at 15:29

SessionState TimeOut is not working Properly

2 Answers2