Asp.Net Core logout banned user

Question

I am banning specific user from my website and update the database fields with ban information but if they are already logged in they can still use website

I can control the database for ban information on every request but i do not want to control the database if user banned or not on every request for performance reasons.

Is there any easy way to do that?

How can i force them to logout ?

What mechanism do you use to keep the user logged in? JWT tokens? — nvoigt, Nov 19 '18 at 08:38
@TânNguyễn how can i logout from server? is there a way to do that like HttpContext.SignOutAsync — Huzeyfe Coşkun, Nov 19 '18 at 08:53
https://stackoverflow.com/questions/3098724/programmatically-logout-an-asp-net-user/3098840#3098840, https://stackoverflow.com/questions/33743173/invalidate-asp-net-identity-2-0-login-without-removing-the-application-cookie?rq=1 — CodeCaster, Nov 19 '18 at 09:45

score 0 · Answer 1 · answered Nov 21 '18 at 10:27

0

thanks for your answers, i did not find any way to control database,

i used cookie validator on every 20 requests to reduces db checks and if user is banned, i signout he/she

answered Nov 21 '18 at 10:27

Huzeyfe Coşkun

23
4

haven't you find the solution yet? – Mohammad Barbast Jun 09 '21 at 14:18

Asp.Net Core logout banned user

1 Answers1