I currently use the default forms authentication method for my ASP.NET MVC application.
above all of my actionmethods that require authentication I have this attribute
[Authorize()]
When someone tries to call the page that that action method “serves” and they haven’t yet logged in, it sends them to the login page…perfect! However, if their session times out and they try to hit that page, they’re also just redirected to the login page with no indication of why. I’d like to be able to determine if it’s a new visit, or if it’s a timeout and display a different message on the login screen accordingly.
Is that possible?
On sign-in, you can set a cookie that’s tied to the browser session. If that cookie exists, you know that the session timed out. If not, you know it’s a new visit.