Question

why isn’t my timeout attribute working. I set it to 1 minute, even then It has been more than an hour and the session hasn’t expired. Here is what i have written in web.config

    <authentication mode="Forms">
      <forms loginUrl="~/Account/Login.aspx" timeout="1" cookieless="UseCookies"  />
    </authentication>
    <sessionState mode="InProc" timeout="1" />
  </system.web>

any help?

Answer 1

I just inherited a project with with the same issue. One possibility is to make sure your pages aren’t making any calls to the server and resetting the timeout. You can try using something like fiddler to see if your app is sending Get requests…

I had Ajax Timer Controls refreshing updatePanels as the source of my problem.