Asp.NET身份設置永久性Cookie後

Question

我已經寫了下面的代碼像下面刷新用戶角色後，他們訂閱我的網站像下面的具體時間到期：

private void RefreshUserRoles() 
     { 
      var AuthenticationManager = HttpContext.GetOwinContext().Authentication; 
      var Identity = new ClaimsIdentity(User.Identity); 
      Identity.RemoveClaim(Identity.FindFirst(ClaimTypes.Role)); 
      Identity.AddClaim(new Claim(ClaimTypes.Role, "Subscriber")); 
      AuthenticationManager.AuthenticationResponseGrant = new AuthenticationResponseGrant 
      (new ClaimsPrincipal(Identity), new AuthenticationProperties { IsPersistent = true}); 
     } 

請注意，這行代碼：

AuthenticationManager.AuthenticationResponseGrant = new AuthenticationResponseGrant 
       (new ClaimsPrincipal(Identity), new AuthenticationProperties { IsPersistent = true}); 
      } 

用戶回到我的網站後，我設置cookie爲持久性的，但我忘了設置此cookie的到期日期。我應該將這個cookie設置爲持續30分鐘，之後應該要求用戶重新登錄系統。

由於有些用戶從不重新登錄網站，這給我留下了一個問題，現在我需要在訪問網站時重置其瀏覽器中的所有用戶cookie，並在取消訂閱時更改其角色。我注意到一些用戶取消了他們的訂閱，從來沒有重新記錄，但尚未他們仍然能在我的網站使用功能...

所以我的問題是：

1. How to set expiration of cookie to 30 minutes after which user will be asked to re-log onto the system. 

2. How to Setup to re-check users cookies if they haven't expired in a long time so that I can reset their cookies to regular user if they cancelled subscription? 

Answer 1

這裏是ConfigureAuth方法我談論...

 public void ConfigureAuth(IAppBuilder app) 
    { 
     app.CreatePerOwinContext(ApplicationDbContext.Create); 
     app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create); 
     app.CreatePerOwinContext<ApplicationSignInManager>(ApplicationSignInManager.Create); 

     app.UseCookieAuthentication(new CookieAuthenticationOptions 
     { 
      AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie, 
      LoginPath = new PathString("/Controller/Action"), 
      Provider = new CookieAuthenticationProvider 
      { 
       OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, ApplicationUser>(
        validateInterval: TimeSpan.FromMinutes(30), 
        regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager)) 
      } 
     });    
     app.UseExternalSignInCookie(DefaultAuthenticationTypes.ExternalCookie); 

     app.UseTwoFactorSignInCookie(DefaultAuthenticationTypes.TwoFactorCookie, TimeSpan.FromMinutes(5)); 

     app.UseTwoFactorRememberBrowserCookie(DefaultAuthenticationTypes.TwoFactorRememberBrowserCookie); 

    } 

這就是我如何設置它，它適用於我。