2

I have a client integrated with my idsrv instance. In the OpenIdConnectAuthenticationOptions I have UseTokenLifetime = true. Even with this being so, when I check the cookie expiration in the browser for the client, the cookie is being set as expires = session. Could something be interfering with setting the cookie expiration to the same value as the IdentityTokenLifetime (36000)? Is this not the behavior I should expect (sorry if I'm looking at this incorrectly)?

Also, in case it's worth noting, the client is configured with a Hybrid flow.

Venkata Dorisala
  • 4,783
  • 7
  • 49
  • 90
Ryan Mendoza
  • 920
  • 1
  • 13
  • 27

0 Answers0