Have Geek Brain

ASP.NET MVC + Forms + AJAX Authentication: Poll action without resetting expiration

Is there a way to mark the controller action to not reset the expiration date of the form registration ticket? I want to poll the server every x seconds for new information using ajax, but this will effectively prevent the user session from expiring.

+2


a source to share


1 answer


The code that updates the ticket bakes inside the FormsAuthenticationModule class, which is sealed, and this change cannot be changed. This is done by the RenewTicketIfOld method . Either way, allowing slideExpiration is considered a security vulnerability for your site.



0


a source






More articles:


All Articles