Session State in MVC 3

Question

User-1723392076 posted

Hi,

I configured session state in web.config like this:

    <sessionState
   mode="InProc"
   timeout="1"
   cookieless="UseCookies"
   regenerateExpiredSessionId="false"
   />

I need users to log in before they access content and I need user sessions to ime out after few minutes of inactivity.

With above setting I can click after more than one minute and the user is NOT logged out - the session does not time out.

What am I missing?

M.

Answer 1

User-1359474226 posted

Did you put your login code in a Session like the steps shown below.

User Enters Username and password

User is validated against a database

if the user is valid then

Session["AuthenticatedUser"] = true

else

Session["AuthenticatedUser"] = true

In the home page you can put a check like this

if Session["AuthenticatedUser"] is true then allow access if not then redirect to login page.

Now this value Session["AuthenticatedUser"] will be null after 1 minute of inactivity.

I suggest you use form authentication for login mechanism. Here is a link

http://support.microsoft.com/kb/301240

Hope this helps

 

Answer 2

User-578657687 posted

Hi,

You may check this link below:

http://msdn.microsoft.com/en-us/library/87069683(v=VS.80).aspx