记住我，ASP.NET表单身份验证中的功能不起作用 [英] Remember me functionality in ASP.NET Form Authentication doesn't work

问题描述

我正在使用ASP.NET表单身份验证将用户登录到我们正在开发的网站中.

I'm using ASP.NET forms authentication for logging users into a website we're developing.

该功能的一部分是记住我"复选框，如果用户选中该复选框，则可以记住一个月.

Part of the functionality is a "Remember me" checkbox which remembers the user for a month if they check it.

用于登录用户的代码如下:

The code for logging the user in is as follows:

public static void Login(HttpResponse response, string username,
  bool rememberMeChecked)
{
  FormsAuthentication.Initialize();
  FormsAuthenticationTicket tkt = new FormsAuthenticationTicket(1, username, DateTime.Now,
    DateTime.Now.AddMinutes(30), rememberMeChecked,
    FormsAuthentication.FormsCookiePath);
  HttpCookie ck = new HttpCookie(FormsAuthentication.FormsCookieName, FormsAuthentication.Encrypt(tkt));
  ck.Path = FormsAuthentication.FormsCookiePath;

  if (rememberMe)
    ck.Expires = DateTime.Now.AddMonths(1);

  response.Cookies.Add(ck);
}

web.config中的相关部分是这样的:

The relevant section in the web.config is this:

<authentication mode="Forms">
  <forms loginUrl="Home.aspx" defaultUrl="~/" slidingExpiration="true" timeout="43200" />
</authentication>

这可以很好地记录用户，但如果他们不使用该网站，则半小时后将其注销，尽管其持久性属性(rememberMeChecked)设置为true，并且如果设置为true，则cookie设置为在月.这里有我想念的东西吗?

This logs the user fine but logs them out after half an hour if they don't use the site, although its persistence property (rememberMeChecked) is set to true and if it is true, the cookie is set to expire after a month. Is there something I'm missing here?

预先感谢， F

推荐答案

即使cookie本身在30天后失效，看来您的身份验证票仍配置为在半小时后失效.您可能也必须延长票证的寿命:

It looks like your authentication ticket is still configured to expire after half an hour, even if the cookie itself expires in 30 days. You probably have to extend the ticket's lifetime too:

public static void Login(HttpResponse response, string username,
    bool rememberMeChecked)
{
    DateTime expiration = DateTime.Now.AddMinutes(30);
    if (rememberMe) {
        expiration = DateTime.Now.AddMonths(1);
    }

    FormsAuthentication.Initialize();
    FormsAuthenticationTicket tkt = new FormsAuthenticationTicket(1, username,
        DateTime.Now, expiration, rememberMeChecked,
        FormsAuthentication.FormsCookiePath);

    HttpCookie ck = new HttpCookie(FormsAuthentication.FormsCookieName,
        FormsAuthentication.Encrypt(tkt));
    ck.Path = FormsAuthentication.FormsCookiePath;
    response.Cookies.Add(ck);
}

这篇关于记住我，ASP.NET表单身份验证中的功能不起作用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！