ASP.NET Core MVC

MVC的会话过期由ASP.NET Core通过cookie提供，独立于ASP.NET Zero.

ASP.NET Core MVC

Session expiry for MVC is provided via cookie by ASP.NET Core, independent of ASP.NET Zero.

在 Startup.cs 中的 IdentityRegistrar.Register 之后调用 ConfigureApplicationCookie :

public IServiceProvider ConfigureServices(IServiceCollection services)
{
    // ...

    IdentityRegistrar.Register(services);                  // No change
    AuthConfigurer.Configure(services, _appConfiguration); // No change

    services.ConfigureApplicationCookie(o =>
    {
        o.ExpireTimeSpan = TimeSpan.FromHours(1);
        o.SlidingExpiration = true;
    });

    // ...
}

来自 ASP.NET Core v2.2.8 CookieAuthenticationAuthentications.cs#L30-L36 :

public CookieAuthenticationOptions()
{
    ExpireTimeSpan = TimeSpan.FromDays(14);
    ReturnUrlParameter = CookieAuthenticationDefaults.ReturnUrlParameter;
    SlidingExpiration = true;
    Events = new CookieAuthenticationEvents();
}

ASP.NET零(对于ASP.NET Core)

ASP.NET Zero v7.2.0 +提供:

ASP.NET Zero (for ASP.NET Core)

ASP.NET Zero v7.2.0+ provides:

• 对于MVC:前端配置和倒数模式.
  文件:aspnet-core-mvc/v7.2.0/Features-Mvc-Core-Tenant-Settings#user-management
• 对于Angular:通过令牌，前端配置和倒数模式实现会话超时.
  文件: aspnet-core-angular/v7.2.0/Features-Angular-Tenant-Settings#user-management