Search code examples
authenticationasp.net-mvc-5

CookieAuthenticationOptions, ExpireTimeSpan does not work


I have the following code:

    public void ConfigureAuth(IAppBuilder app)
    {
        app.UseCookieAuthentication(new CookieAuthenticationOptions
        {
            AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
            ExpireTimeSpan = System.TimeSpan.FromMinutes(1),
            LoginPath = new PathString("/Account/Login"),
            LogoutPath = new PathString("/Account/LogOff")
        });

But login session active more than 1 minute. Also, LogoutPath is not called when time is expired. Why?


Solution

  • It does expire.

    Make sure you do not have any background ajax activity as it extends the session (SlidingExpiration is true by default).

    Also I had to manually delete the old cookie after I changed ExpireTimeSpan from the default 14 days to a smaller value.