Posted on: 2/10/2015 4:39:00 PM | Views : 646

I have a question that I have not been able to find an answer to.  I'll do my best to explain.  It is easily reproduced with an empty MVC 5 project using ASP.Net Identity for user authentication.
If I create a new MVC 5 application using ASP.NetIdentity 2, the default ConfigureAuth method in Startup.Auth.cs does not specify an ExpireTimeSpan value.

app.UseCookieAuthentication(new CookieAuthenticationOptions { AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie, LoginPath = new PathString("/Account/Login"), Provider = new CookieAuthenticationProvider { // Enables the application to validate the security stamp when the user logs in. // This is a security feature which is used when you change a password or add an external login to your account. OnV ...

Go to the complete details ...