How auto log out after 30 min inactivity?

[Cirene]

Using ASP.NET membership. How do I automatically log a user out of the
system after 30 min of inactivity? Thanks.

 

[Juan T. Llibre]

Since you're using forms authentication, modify the forms authentication timeout :

<forms name=".ASPXAUTH" loginUrl="login.aspx" protection="All" timeout="30" path="/"
requireSSL="false" slidingExpiration="true">

 

[Cirene]

Thanks. I assume this is in the web.config file, correc?

Do I put that statement under here?
<authentication mode="Forms"/>

 

[Juan T. Llibre]

re:
!> Thanks. I assume this is in the web.config file, correct?

Correct.

re:
!> Do I put that statement under here?
!> <authentication mode="Forms"/>

Yes. See a complete example here :
http://msdn.microsoft.com/en-us/library/1d3t3c61.aspx

 

[Cowboy \(Gregory A. Beamer\)]

What Juan has suggested handles the backend. You may also want to consider
adding something that kicks the user to the login page after the session is
gone (or actually just before, as the timeout is not guaranteed 100%).

To do that you can use a meta-refresh tag on every page for 30 minutes. Kick
the user to a logout page that does the following:

1. Kicks off membership
2. Abandons session

#1 should be accomplished by #2, but you can code both for safety. Then have
that page forward a person to the login page.

Setting the config will lose the session, etc., but if a person is in the
middle of a form, he will not find out until he hits the submit button.