I'm using the latest templates from VS2013, Update 4 for an MVC site, which includes Asp.Net Identity 2. I've updated it to the latest 2.2.1 version. However, I'm still having various issues with keeping users logged in. I'm starting to wonder if I'm understanding
things right. Without describing my problem, I have just a simple question. Should users who are logged out due to expired session be re-logged in automatically when they visit the site again if I'm using cookie authentication?
In other words, if I set my cookie authentication up with the default expiration of 14 days, can a user expect not to be prompted for login credentials again for 2 weeks, even if they leave the site for a few days? This seems to be how popular sites like
Facebook and various e-mail hosts use, so I'd like to have the same behavior, but it seems there are several reasons a user session can expire, therefore nullifying the whole 'remember me' functionality. Is the cookie authentication su ...
Go to the complete details ...