Hi, I have an admin view where I can delete users. When I delete them through
await UserManager.DeleteAsync(user);
they can still be logged in for up to 30 minutes.
The 30 minutes from from validateInterval in startup.Auth.cs:
OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, ApplicationUser>(
validateInterval: TimeSpan.FromMinutes(30),
regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager))
So I've looked at the source code of the Owin SecurityStampValidator class at
Go to the complete details ...