Question

I use setInterval with an ajax call to check for new messages every minute. This call extends authentication cookie (because I have slidingExpiration set to true), thus authentication never expires.

This question had similar issue, but the solution is for class .net project and I can’t see how I can apply it to my MVC project.

It would be nice if a solution was in a form of an attribute like [DoNotExtendAuthentication] which I could slap on an action, but any help is appreciated.

Answer 1

public class DoNotExtendAuthenticationAttribute : ActionFilterAttribute
{
    public override void OnResultExecuted(ResultExecutedContext filterContext)
    {
        filterContext.HttpContext.Response.Cookies.Remove(
            FormsAuthentication.FormsCookieName
        );
    }
}

and then:

[Authorize]
[DoNotExtendAuthentication]
public ActionResult SomeAction()
{
    ...
}