Default Authentication Ticket Expiration

[ryan.d.rembaum]

I have what I hope will be a quick question:

If I use a NON-PERSISTENT default authentication ticket (i.e. One
created by redirectfromlogin with persistent = false) what is the
default expiration of said ticket? Is it based on the session timeout
in my web.config file?

I am trying to create a custom authentication ticket and want it to be
exactly like the default ticket except with some data in the userdata
section. How would I do this (especially in terms of expiration time).
For example, if the expiration of a non-persistent ticket is generally
the same as the session expiration, how could I specify this in code.
If it is based on some other default, how can I specify that?

Thanks,
Ryan

 

[Brock Allen]

If I use a NON-PERSISTENT default authentication ticket (i.e. One

created by redirectfromlogin with persistent = false) what is the
default expiration of said ticket? Is it based on the session timeout
in my web.config file?

It's based upon the timeout attribute of the <forms> element in web.config.

Dom has lots to say about the forms authentication ticket and cookie (although
it's more about persistent cookies):

http://www.leastprivilege.com/FormsAuthPersistentCookies20RTM.aspx

-Brock
DevelopMentor
http://staff.develop.com/balle