login page when users session expires within specific period. | ||
Introduction
In every applications, we need to maintain the session expiration time
say for example 1hr or 30 minuets and this configuration item we can do with web.config file or in IIS. But here, application should redirect to login page automatically when session expires. Configure session time
First configure the session timeout value in web.config file as like
below, here I’m configuring the session timeout value as 3 minutes for this sample .
Create Pagebase class
create a custom pagebase class and write the common functionality codes into this class. Through this class, we can share the common functions to other web pages. In this class we need inherit the System.Web.UI.Page class. Place the below code into Pagebase class.e
Above AutoRedirect function will be used to redirect the login page when session expires, by using javascript window.setInterval, This window.setInterval executes a javascript function repeatedly with specific time delay. Here we are configuring the time delay as session timeout value. Once it’s reached the session expiration time then automatically executes the Redirect function and control transfer to login page.
In testAutologout page, we need to inherit the PageBaseclass as like below also same thing we need to inherit wherever required this functionality.
Once application reached session expiration time if suppose there is no action performed by user, it shows the warning message as like below and if clicks the Ok in the message box it redirects to login.aspx page. |
What is Claim ? A claim in the world of authentication and authorization can be defined as a statement about an entity, typically a user. A claim can be very fine grained: Ram is an admin Ram’s email address is Ram@yahoo.com Ram lives in Mumbai Tom’s allowed to view sales figures between 2009 and 2012 Tom’s allowed to wipe out the universe Claims originate from a trusted entity other than the one that is being described. This means that it is not enough that Tom says that he is an administrator. If your company’s intranet runs on Windows then Tom will most likely figure in Active Directory/Email server/Sales authorisation system and it will be these systems that will hold these claims about Tom. The idea is that if a trusted entity such as AD tells us things about Tom then we believe them a lot more than if Tom himself comes with the same claims . This external trusted entity is called an Issuer . The KEY in the key-value pairs is called a Typ...
Comments
Post a Comment