FormsAuthentication.SlidingExpiration Property

 
System_CAPS_noteNote

The .NET API Reference documentation has a new home. Visit the .NET API Browser on docs.microsoft.com to see the new experience.

Gets a value indicating whether sliding expiration is enabled.

Namespace:   System.Web.Security
Assembly:  System.Web (in System.Web.dll)

static member SlidingExpiration : bool with get

Property Value

Type: System.Boolean

true if sliding expiration is enabled; otherwise, false. The default is true.

The SlidingExpiration property value is set using the slidingExpiration attribute of the configuration element.

Sliding expiration resets the expiration time for a valid authentication cookie if a request is made and more than half of the timeout interval has elapsed. If the cookie expires, the user must re-authenticate. Setting the SlidingExpiration property to false can improve the security of an application by limiting the time for which an authentication cookie is valid, based on the configured timeout value.

We recommend that if you configure requireSSL as false, you also configure slidingExpiration as false, to reduce the amount of time for which a ticket is valid.

The following code example sets the slidingExpiration attribute to false in the Web.config file for an ASP.NET application.

<authentication mode="Forms">
  <forms loginUrl="member_login.aspx"
    name=".ASPXFORMSAUTH"
    cookieless="UseCookies"
    requireSSL="true" 
    slidingExpiration="false" />
</authentication>

.NET Framework
Available since 1.1
Return to top
Show: