request new login at new session

Question

User1191665739 posted

Hi..

I have login with owin and claims....i need that when user reopen my app after close navigator  request login(actually app is keeping autentication :( ...)..how i can disable this implicit  option like "remeber me".?

Answer 1

User614698185 posted

Hi Elvin Diz,

The session ID is identified by the cookie ASP.NET places in the browser. And even if you abandon session, ASP.NET will reuse it if the cookie is there. You need to remove that cookie by setting its expiration date like below:

HttpCookie mycookie =  new HttpCookie("ASP.NET_SessionId");
mycookie.Expires = DateTime.Now.AddDays(-1);
Response.Cookies.Add(mycookie);

This will force ASP.NET to regenerate a new session ID.

Best Regards,

Candice Zhou

Answer 2

User1779161005 posted

The cookie authentication mechanism in OWIN/Katana has nothing to do with session state.

If you do not want to allow persistent authentication cookies, then don't set the IsPeristent flag on the AuthenticationProperties when signing the user in on your login page. Also, don't show the "remember me" on your login page.

https://msdn.microsoft.com/en-us/library/microsoft.owin.security.authenticationproperties%28v=vs.113%29.aspx