hi everybody,
I built my application in the way that the user is redirected to a session timeout page with some text explaining the issue when his session expires. This is really working fine when the session times out, but when the user was inactive until the forms authentication timeout is reached then he is directly redirected to the login-page. That is really ugly and feels more like a bug when you are trying to perform some action and get kicked out suddenly.
So my question is simply if there are any negative impacts when I set the forms authentication timeout to 10.000 minutes or something like that? By the way, what is themaximum for this option?
I`m aksing because setting the session timeout to such a long period whould not be a good idea of course because the memory used by the sessionState-object cannot be garbage collected for such a long time. Mabe there are some similar reasons why such long forms auth. timeouts should be avoided?
...
Go to the complete details ...