请求用户重新登录 [英] forece user to relogin

问题描述

iam在asp.net 4网站上工作

我们每天运行另一个Windows应用程序，每30天更改一次用户密码并使用新密码发送邮件

但问题如果你的登录和选择记住我复选框

密码更改后他仍然打包工作

是否有任何问题迫使用户加载主页例如，比较aspnet_member passowrd与以前的密码，以检查是否不是相同的结束会话

所以我的问题aspnet_login控制存储密码，如果使用remmber me复选框

iam working on asp.net 4 web site
we have another windows application run every day that change users password every 30 days & send them mail with the new password
but the problem if your loging & choose remember me check box
after password change he still bale to work
is there's any issue that force the user when load the home page for example to compare the aspnet_member passowrd with the previous password to check if not the same end session
so my question where aspnet_login control store password in case of use remmber me checkbox

推荐答案

据我了解你的问题，你说我们每天运行另一个Windows应用程序，每30天更改一次用户密码，所以让应用程序完成所有的工作，你干涉的原因是什么？



浏览器的记住我功能允许用户将他们的身份验证凭据存储在浏览器的凭据存储中。然后，这允许浏览器提交存储的认证凭证而无需额外的用户交互。只要用户名和密码保持不变，浏览器就会自动向记住的站点或应用程序进行身份验证。



实际上，浏览器而不是个人现在正在对站点或应用程序进行身份验证。所以一旦你在数据库中更改密码，那么浏览器将提供用户的详细信息存储在凭证存储[cookies]中，最终，访问权限将被撤销。如果您有任何疑问，请告诉我。



问候......：）

As per i understand your question,you said we have another windows application run every day that change users password every 30 days,so let the application do all the stuff,why you interfere in that?

The browser’s "Remember Me" feature allows users to store their authentication credentials in the browser’s credential store. This then allows the browser to submit stored authentication credentials without additional user interaction. The browser will automatically authenticate to the remembered site or application, as long as the username and password remain unchanged.

In effect,the browser,and not the individual, is now authenticating to the site or application.,so once you changed password in database,then browser will provide that user with details stored in credential store[cookies] and ultimately,access will be revoked.Let me know if you have any doubts.

Regards..:)

那么问题是什么？在表中添加一个标记，用于存储用户凭据。每当您向用户设置发送带有新密码的电子邮件时，该标记为true。如果用户登录并且凭据匹配，则将该标志设置为false。如果用户选中了记住我复选框，并且当您针对您的表检查凭据，并且其标志设置为true时，则显示消息您的密码已过期。请使用您在注册的电子邮件中发送给您的新密码登录邮件ID。

So what's the problem? Add a flag to your table where you store user credentials. Whenever you send an email with new password to your user set that flag to true. If the user log in and credentials match set the flag to false. If the user has checked "remember me" checkbox and when you check the credentials against your table, and it has flag set to true display the message "Your password has expired. Please login with your new password sent to you at your registered e-mail id."

这篇关于请求用户重新登录的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！