What is default timeout value for CookieAuthenticationOptions in asp.net core MVC

Question

User-1941004428 posted

Hi,
I am using cookies middleware authentication in ASP.Net core project.I want to know default timeout value for 'CookieAuthenticationOptions.ExpireTimeSpan'.
Also It would be great if anyone can specify default flag value for 'CookieAuthenticationOptions.SlidingExpiration'.
I am not able to get official default values for CookieAuthenticationOptions anywhere. So any help in this regard would be great.

Thanks,
Shashikant

Answer 1

User-1716253493 posted

By default the cookie middleware will use appropriate security options for any cookies it creates, setting HTTPONLY to avoid the cookie being accessible in client side JavaScript and limiting the cookie to HTTPS if a request has come over HTTPS.

http://www.jerriepelser.com/blog/managing-session-lifetime-aspnet-core-oauth-providers/

Answer 2

User-832373396 posted

Hi shashimok,

I find somebody says that "By default, the cookies lifetime is closed until the browser is closed." ，so I guess that the default timeout for .net core is same as that due to I don't find out somebody tell about it in .net core .

and this body says that 'SlidingExpiration is true by default).: from http://stackoverflow.com/questions/20226016/cookieauthenticationoptions-expiretimespan-does-not-work

 

Answer 3

User1168443798 posted

>> I want to know default timeout value for 'CookieAuthenticationOptions.ExpireTimeSpan'.

Per to the source code of Microsoft.AspNetCore.Authentication.Cookies,

default value for ExpireTimeSpan is TimeSpan.FromDays(14) and SlidingExpiration is true.

public CookieAuthenticationOptions()
        {
            ReturnUrlParameter = CookieAuthenticationDefaults.ReturnUrlParameter;
            ExpireTimeSpan = TimeSpan.FromDays(14);
            SlidingExpiration = true;
            CookieHttpOnly = true;
            CookieSecure = CookieSecurePolicy.SameAsRequest;
            Events = new CookieAuthenticationEvents();
        }

Reference: https://github.com/aspnet/Security/blob/99aa3bd35dd5fbe46a93eef8a2c8ab1f9fe8d05b/src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationOptions.cs