Home/ Questions/Q 8419277
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T02:33:52+00:00

This is probably a duplicate question, but since I can’t find the answer in

  • 0

This is probably a duplicate question, but since I can’t find the answer in the questions from the past I am going to ask again.

In my ASP.NET application, when I authorize the user, I set the custom FormsAuthenticationTicket. The persistance variable is false, so the authentication cookie should only be valid for current session.

My question is when would this session end? I restart my IIS Express development server, I shut down the dev machine, etc, and the session seems to be still active and the user is authenticated with that cookie.

How come in my VS 2012 + IIS Express environment sessions are immortal?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    That’s not an issue. You can restart the server and as long as the authentication cookie is still valid, the user is considered logged in. Remember, HTTP is a disconnected protocol.

    The cookie will be removed the moment the user logs out and you programmatically remove the cookie or when the user closes his browser.

    • 0