Automatically expire authorization ticket

LarryB · September 21st, 2007, 02:46 PM

Looking for a way to automatically expire an authorization ticket. The scenario is that a user has been authenticated for a specific page, then moves to another page in a different folder. Would like to be able to force them through authentication again. I tried setting the timeout setting in the web.config file, but that only works for a refresh of the page. Another alternative would seem to be to not cache the page. I've found some examples of that but can't seem to get it to work properly.

rlb · October 16th, 2007, 12:30 PM

How about

Code:

FormsAuthentication.SignOut();
Session.Abandon();
Response.Redirect(webAuthLogout);

for the new page?
Have you considered configuring your subdirectory as new separate virtual directory so you can have a new web.config and consequently need a new login validation?