6

I am using ASP.NET Session and Form Authentication. I have set the Timeout of their cookie. But Chrome Showing me that Cookie Expiration is equal to Session,

enter image description here

Imran Qadir Baksh - Baloch
  • 32,612
  • 68
  • 179
  • 322
  • 1
    Can you post the code that you're using to set the expiration? – tristankoffee Sep 10 '12 at 08:48
  • @tristankoffee, Here is the forms loginUrl="~/Login.aspx" timeout="XX" – Imran Qadir Baksh - Baloch Sep 10 '12 at 08:57
  • 2
    I think I got this. The issue is that ASP.NET does not set the cookie expiration of these cookies because they are not persistent. So that's why they are called Session Cookies. – Imran Qadir Baksh - Baloch Sep 10 '12 at 09:06
  • 1
    Your comment is correct. Whenever you don't set an expiry date then it means you want a non-persistent cookie, therefore a "session cookie" will becreated. It typically exists in memory of the browser (not in physical storage such as file or DB). Whenever the browser's process is closed those cookies are deleted. – BornToCode May 08 '17 at 21:34
  • Possible duplicate of [Session cookie versus other kinds of cookies](https://stackoverflow.com/questions/8547620/session-cookie-versus-other-kinds-of-cookies) – DavidRR Jan 12 '18 at 13:54

0 Answers0