Last week the Web Content Accessibility Guidelines (WCAG) 2.0 was released and one of the requirements to reach AAA compliancy is 2.2.5: "When an authenticated session expires, the user can continue the activity without loss of data after re-authenticating."
I have an application that uses windows forms authentication with a timeout value of 20 minutes. If a user takes a reeeaallly long time to fill out a form he will get logged out in the meantime and when he finally submits the form he will be redirected to the login page for re-authentication. After logging back in he is redirected to the page he was previously on. I can live with losing the session state but I would like to figure out a way to keep the viewstate and the data posted back from the form.
Can someone think of a straight forward way to do this? And if not, what mechanism is best to use for intercepting the post-back before the data is lost and the user is redirected to the login page?
...
Go to the complete details ...