Redirect to login page on timeout

[Anders Jacobsen]

Hey

Im devloping an application in asp.net 1.1 SP2. I need to control timeout
values for each user. Im having trouble to make it work. When the session
timouts out I want to redirect the user to the login page. OK.,

Im aware that we have 2 timeouts. Session timeout and forms authentication
timeout.

In login i do this
---------------
Response.Cookie s.Remove(FormsA uthentication.F ormsCookieName) ;
FormsAuthentica tionTicket ticket = new FormsAuthentica tionTicket(
1,
_username,
DateTime.Now,
DateTime.Now.Ad dMinutes(20), <<<<< HOW DO I CHANGE THIS VALUE WHILE USER
LOGED ON?
false,
_userid.ToStrin g(),
FormsAuthentica tion.FormsCooki ePath )
;
string encryptedTicket = FormsAuthentica tion.Encrypt(ti cket);
HttpContext.Cur rent.Response.C ookies.Add(
new HttpCookie(
FormsAuthentica tion.FormsCooki eName,
encryptedTicket )
);

HttpContext.Cur rent.Session["TimeoutVar "] = "";`
--------------

I have never gotten this to work so I tried to use the Session to control
this and tried something like this.
----------------
protected void Application_OnA cquireRequestSt ate(Object sender, EventArgs e)
{
if( User.Identity != null && User.Identity.I sAuthenticated &&
Session["TimeoutVar "] == null )
{
FormsAuthentica tion.SignOut();
this.Response.R edirect(this.Re quest.Applicati onPath + "/Default.aspx");
}
}
---------------

And in a derrived page template
----------------
override protected void OnInit(EventArg s e)
{
base.OnInit(e);

if(User.Identit y.IsAuthenticat ed)
{
if(Session.Time out != (Context.User.I dentity as
UserIdentity).U ser.Timeout)
{
Session.Timeout = (Context.User.I dentity as UserIdentity).U ser.Timeout;

} } }}

This works...Sometim es. But it randomly enter the IF clause in
OnAcquireReques tState and gets redirected. It varys alot from seconds but
sometimes servereal mintues.

Anyway. How is the "CORRECT" way to implement functionality that can set;
from user to user; logout interval.when using forms autentication.

NB: Session is inproc and set to 20 min in web.config (but is instantly
overriden by the codebehind reassign)

Thanks in regards
Anders

[Patrick.O.Ige]

Why don't you try using javascript for this.
Patrick

"Anders Jacobsen" <none> wrote in message
news:#5******** *****@TK2MSFTNG P10.phx.gbl...

Hey

Im devloping an application in asp.net 1.1 SP2. I need to control timeout
values for each user. Im having trouble to make it work. When the session
timouts out I want to redirect the user to the login page. OK.,

Im aware that we have 2 timeouts. Session timeout and forms authentication
timeout.

In login i do this
---------------
Response.Cookie s.Remove(FormsA uthentication.F ormsCookieName) ;
FormsAuthentica tionTicket ticket = new FormsAuthentica tionTicket(
1,
_username,
DateTime.Now,
DateTime.Now.Ad dMinutes(20), <<<<< HOW DO I CHANGE THIS VALUE WHILE USER
LOGED ON?
false,
_userid.ToStrin g(),
FormsAuthentica tion.FormsCooki ePath )
;
string encryptedTicket = FormsAuthentica tion.Encrypt(ti cket);
HttpContext.Cur rent.Response.C ookies.Add(
new HttpCookie(
FormsAuthentica tion.FormsCooki eName,
encryptedTicket )
);

HttpContext.Cur rent.Session["TimeoutVar "] = "";`
--------------

I have never gotten this to work so I tried to use the Session to control
this and tried something like this.
----------------
protected void Application_OnA cquireRequestSt ate(Object sender, EventArgs e) {
if( User.Identity != null && User.Identity.I sAuthenticated &&
Session["TimeoutVar "] == null )
{
FormsAuthentica tion.SignOut();
this.Response.R edirect(this.Re quest.Applicati onPath + "/Default.aspx");
}
}
---------------

And in a derrived page template
----------------
override protected void OnInit(EventArg s e)
{
base.OnInit(e);

if(User.Identit y.IsAuthenticat ed)
{
if(Session.Time out != (Context.User.I dentity as
UserIdentity).U ser.Timeout)
{
Session.Timeout = (Context.User.I dentity as UserIdentity).U ser.Timeout;

} } }}

This works...Sometim es. But it randomly enter the IF clause in
OnAcquireReques tState and gets redirected. It varys alot from seconds but
sometimes servereal mintues.

Anyway. How is the "CORRECT" way to implement functionality that can set;
from user to user; logout interval.when using forms autentication.

NB: Session is inproc and set to 20 min in web.config (but is instantly
overriden by the codebehind reassign)

Thanks in regards
Anders