持久身份验证令牌过期

发布于 2024-12-21 14:32:40 字数 765 浏览 3 评论 0原文

我有一个使用表单身份验证的 ASP.NET MVC 应用程序。下面是我创建身份验证令牌的代码行：

FormsAuthentication.SetAuthCookie(username, true);

我的 web.config 包含：

<system.web>
  <machineKey validationKey="{unique key}" decryptionKey="{unique key}" validation="SHA1" decryption="AES" />
  <authentication mode="Forms">
    <forms loginUrl="~/account/" timeout="2880" />
  </authentication>
  ...
</system.web>
<location path="my">
  <system.web>
    <authorization>
      <deny users="?" />
    </authorization>
  </system.web>
</location>

尽管持久 cookie 的参数设置为 true，但我的用户在几天不活动后就会注销。

该应用程序部署到 AppHarbor，但当它托管在专用服务器上时，我遇到了相同的行为。

我错过了什么会导致用户偶尔注销？

原文

I have an ASP.NET MVC application using forms authentication. Here's the line of code where I create the auth token:

FormsAuthentication.SetAuthCookie(username, true);

My web.config contains:

<system.web>
  <machineKey validationKey="{unique key}" decryptionKey="{unique key}" validation="SHA1" decryption="AES" />
  <authentication mode="Forms">
    <forms loginUrl="~/account/" timeout="2880" />
  </authentication>
  ...
</system.web>
<location path="my">
  <system.web>
    <authorization>
      <deny users="?" />
    </authorization>
  </system.web>
</location>

Despite the parameter for the persistent cookie being set to true, my users get logged out after a few days of inactivity.

The app is deployed to AppHarbor, but I experienced the same behavior when it was hosted on a dedicated server.

What am I missing that would cause users to get logged out sporadically?

分享到QQ

分享到微博