Persistent Cookies

Hello everyone,

I didn't get any response in "Security" forum hence posting here again.

I am having problem with persistent cookies. Even after setting
"CreatePersistentCookie" to true in "FormsAuthentication.SetAuthCookie" I'm
being logged out after the specifed timeout provided in "forms"
element of web.config.

I read somewhere that lifetime of persistent cookies depend on the timeout
attribute on the forms authentcation node. If I have to enter a timeout of
days/weeks then it doesnt really make sense to make my cookie persist in
this fashion, that defies the purpose of persistent cookies.

Any insights welcome
Thanks
Sanchita


.

Relevant Pages

  • Re: Persistent Cookies
    ... They are not used for session management, ... It persists the authentication on the client side so it is sent with the header. ... While the cookie can "re-log on" the user if he times out, it cannot change the timeout behavior on the server just because the user has a cookie. ... I read somewhere that lifetime of persistent cookies depend on the timeout ...
    (microsoft.public.dotnet.framework.aspnet)
  • Persistent Cookie Problem
    ... somehow being logged out after the specifed timeout provided in "forms" ... I read somewhere that persistent cookies take their timeout from the timeout ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Web.config timeout
    ... The element also has an attribute "Timeout", you may set it to a ... Or you may consider use Persistent cookies ... cookie for the form authentication. ... Luke ...
    (microsoft.public.dotnet.framework.aspnet.security)