if (ValidateUser(model.Email,model.Password)
{
  FormsAuthentication.SetAuthCookie(model.Email,model.RememberMe);
  ...

其中SetAuthCookie的第二个参数是createPersistentCookie,其中包含以下文档：

createPersistentCookie
  Type: System.Boolean
    true to create a persistent cookie
    (one that is saved across browser sessions); otherwise,false.

我们希望持续性Cookie在2周后到期(即用户可以在2周内返回网站,不需要重新验证,之后他们会被要求再次登录).

我们如何设置持久性cookie的到期时间？

<system.web>
    <authentication mode="Forms">
          <forms timeout="20160"/>
    </authentication>
</system.web>

超时时间为几分钟.

此超时值与您是否创建持久性Cookie无关.它只是说如果没有明确终止cookie(FormsAuthentication.SignOut),它将在给定的时间段后自动过期.

换句话说,如果你这样做：

FormsAuthentication.SetAuthCookie(someMembershipName,false);

会导致Cookie到期时间：

>用户关闭浏览器,或
>达到超时.

相反如果你这样做：

FormsAuthentication.SetAuthCookie(someMembershipName,true);

将导致cookie只有到达超时时才到期.

HTH

编辑：

从MSDN开始：

超时属性描述如下：

Specifies the time,in integer
minutes,after which the cookie
expires. If the SlidingExpiration
attribute is true,the timeout
attribute is a sliding value,expiring
at the specified number of minutes
after the time that the last request
was received. To prevent compromised
performance,and to avoid multiple
browser warnings for users who have
cookie warnings turned on,the cookie
is updated when more than half of the
specified time has elapsed. This might
cause a loss of precision. The default
is “30” (30 minutes).

Note Under ASP.NET V1.1 persistent
cookies do not time out,regardless of
the setting of the timeout attribute.
However,as of ASP.NET V2.0,
persistent cookies do time out
according to the timeout attribute.

换句话说,此过期设置仅处理Forms Authentication cookie.

表单验证cookie是一个客户端cookie,它与您可能拥有的其他服务器端会话无关(即购物车).

该会话已过期,并显示以下设置：

<sessionstate 
      mode="inproc"
      cookieless="false" 
      timeout="20"

@SuppressWarnings("unchecked")
private void executeAndRestoreDefaultProjectSettings(@NotNull Project project,@NotNull Runnable task) {
  AbstractExternalSystemSettings systemSettings = ExternalSystemApiUtil.getSettings(project,myExternalSystemId);
  Object systemStatetoRestore = null;
  if (systemSettings instanceof PersistentStateComponent) {
    systemStatetoRestore = ((PersistentStateComponent)systemSettings).getState();
  }
  systemSettings.copyFrom(myControl.getSystemSettings());
  Collection projectSettingsToRestore = systemSettings.getLinkedProjectsSettings();
  systemSettings.setLinkedProjectsSettings(Collections.singleton(getCurrentExternalProjectSettings()));
  try {
    task.run();
  }
  finally {
    if (systemStatetoRestore != null) {
      ((PersistentStateComponent)systemSettings).loadState(systemStatetoRestore);
    }
    else {
      systemSettings.setLinkedProjectsSettings(projectSettingsToRestore);
    }
  }
}

@NotNull
public static State getStateSpecOrError(@NotNull Class<? extends PersistentStateComponent> componentClass) {
  State spec = getStateSpec(componentClass);
  if (spec != null) {
    return spec;
  }

  PluginId pluginId = PluginManagerCore.getPluginByClassName(componentClass.getName());
  if (pluginId == null) {
    throw new RuntimeException("No @State annotation found in " + componentClass);
  }
  else {
    throw new PluginException("No @State annotation found in " + componentClass,pluginId);
  }
}

@Nullable
private static Object getProviderInstance(Object componentInstance) {
  if (componentInstance instanceof PersistentStateComponent) {
    return ((PersistentStateComponent)componentInstance).getState();
  }

  return componentInstance;
}

public static void loadFacetConfiguration(final @NotNull FacetConfiguration configuration,final @Nullable Element config)
    throws InvalidDataException {
  if (config != null) {
    if (configuration instanceof PersistentStateComponent) {
      ComponentSerializationUtil.loadComponentState((PersistentStateComponent)configuration,config);
    }
    else {
      configuration.readExternal(config);
    }
  }
}

public static Element saveFacetConfiguration(final FacetConfiguration configuration) throws WriteExternalException {
  if (configuration instanceof PersistentStateComponent) {
    Object state = ((PersistentStateComponent)configuration).getState();
    if (state instanceof Element) return ((Element)state);
    return XmlSerializer.serialize(state,new SkipDefaultValuesSerializationFilters());
  }
  else {
    final Element config = new Element(JpsFacetSerializer.CONfigURATION_TAG);
    configuration.writeExternal(config);
    return config;
  }
}

@SuppressWarnings("unchecked")
private void executeAndRestoreDefaultProjectSettings(@NotNull Project project,@NotNull Runnable task) {
  if (!project.isDefault()) {
    task.run();
    return;
  }

  AbstractExternalSystemSettings systemSettings = mySettingsManager.getSettings(project,myExternalSystemId);
  Object systemStatetoRestore = null;
  if (systemSettings instanceof PersistentStateComponent) {
    systemStatetoRestore = ((PersistentStateComponent)systemSettings).getState();
  }
  systemSettings.copyFrom(myControl.getSystemSettings());
  Collection projectSettingsToRestore = systemSettings.getLinkedProjectsSettings();
  systemSettings.setLinkedProjectsSettings(Collections.singleton(getCurrentExternalProjectSettings()));
  try {
    task.run();
  }
  finally {
    if (systemStatetoRestore != null) {
      ((PersistentStateComponent)systemSettings).loadState(systemStatetoRestore);
    }
    else {
      systemSettings.setLinkedProjectsSettings(projectSettingsToRestore);
    }
  }
}

@Nullable
private static Object getProviderInstance(Object componentInstance) {
  if (componentInstance instanceof PersistentStateComponent) {
    return ((PersistentStateComponent)componentInstance).getState();
  }

  return componentInstance;
}

public static void loadFacetConfiguration(final @NotNull FacetConfiguration configuration,config);
    }
    else {
      configuration.readExternal(config);
    }
  }
}

public static Element saveFacetConfiguration(final FacetConfiguration configuration) throws WriteExternalException {
  if (configuration instanceof PersistentStateComponent) {
    Object state = ((PersistentStateComponent)configuration).getState();
    if (state instanceof Element) return ((Element)state);
    return XmlSerializer.serialize(state,new SkipDefaultValuesSerializationFilters());
  }
  else {
    final Element config = new Element(JpsFacetSerializer.CONfigURATION_TAG);
    configuration.writeExternal(config);
    return config;
  }
}

@SuppressWarnings("unchecked")
private void executeAndRestoreDefaultProjectSettings(@Nonnull Project project,@Nonnull Runnable task) {
  if (!project.isDefault()) {
    task.run();
    return;
  }

  AbstractExternalSystemSettings systemSettings = ExternalSystemApiUtil.getSettings(project,myExternalSystemId);
  Object systemStatetoRestore = null;
  if (systemSettings instanceof PersistentStateComponent) {
    systemStatetoRestore = ((PersistentStateComponent)systemSettings).getState();
  }
  systemSettings.copyFrom(myControl.getSystemSettings());
  Collection projectSettingsToRestore = systemSettings.getLinkedProjectsSettings();
  systemSettings.setLinkedProjectsSettings(Collections.singleton(getCurrentExternalProjectSettings()));
  try {
    task.run();
  }
  finally {
    if (systemStatetoRestore != null) {
      ((PersistentStateComponent)systemSettings).loadState(systemStatetoRestore);
    }
    else {
      systemSettings.setLinkedProjectsSettings(projectSettingsToRestore);
    }
  }
}

@SuppressWarnings("unchecked")
private void executeAndRestoreDefaultProjectSettings(@Nonnull Project project,myExternalSystemId);
  Object systemStatetoRestore = null;
  if (systemSettings instanceof PersistentStateComponent) {
    systemStatetoRestore = ((PersistentStateComponent)systemSettings).getState();
  }
  systemSettings.copyFrom(myControl.getSystemSettings());
  Collection projectSettingsToRestore = systemSettings.getLinkedProjectsSettings();
  systemSettings.setLinkedProjectsSettings(Collections.singleton(getCurrentExternalProjectSettings()));
  try {
    task.run();
  }
  finally {
    if (systemStatetoRestore != null) {
      ((PersistentStateComponent)systemSettings).loadState(systemStatetoRestore);
    }
    else {
      systemSettings.setLinkedProjectsSettings(projectSettingsToRestore);
    }
  }
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@NotNull
public static <T> State getStateSpec(@NotNull PersistentStateComponent<T> persistentStateComponent) {
  return getStateSpecOrError(persistentStateComponent.getClass());
}

@Override
public Object getComponentInstance(@NotNull picocontainer container) throws PicoInitializationException,PicoIntrospectionException {
  Object instance = myInitializedComponentInstance;
  if (instance != null) {
    return instance;
  }

  // we must take read action before adapter lock - if service requested from EDT (2) and pooled (1),will be a deadlock,because EDT waits adapter lock and Pooled waits read lock
  boolean useReadActionToInitService = isUseReadActionToInitService();
  Accesstoken readToken = useReadActionToInitService ? ReadAction.start() : null;
  try {
    synchronized (this) {
      instance = myInitializedComponentInstance;
      if (instance != null) {
        // DCL is fine,field is volatile
        return instance;
      }

      ComponentAdapter delegate = getDelegate();

      // useReadActionToInitService is enabled currently only in internal or test mode or explicitly (registry) - we have enough Feedback to fix,so,don't disturb all users
      if (!useReadActionToInitService && LOG.isDebugEnabled() && ApplicationManager.getApplication().isWriteAccessAllowed() && PersistentStateComponent.class.isAssignableFrom(delegate.getComponentImplementation())) {
        LOG.warn(new Throwable("Getting service from write-action leads to possible deadlock. Service implementation " + myDescriptor.getImplementation()));
      }

      // prevent storages from flushing and blocking FS
      Accesstoken token = HeavyProcessLatch.INSTANCE.processstarted("Creating component '" + myDescriptor.getImplementation() + "'");
      try {
        instance = delegate.getComponentInstance(container);
        if (instance instanceof disposable) {
          disposer.register(myComponentManager,(disposable)instance);
        }

        myComponentManager.initializeComponent(instance,true);

        myInitializedComponentInstance = instance;
        return instance;
      }
      finally {
        token.finish();
      }
    }
  }
  finally {
    if (readToken != null) {
      readToken.finish();
    }
  }
}

public void loadContext(Element fromElement) throws InvalidDataException {
  //noinspection unchecked
  ((PersistentStateComponent<Element>)myDebuggerManager).loadState(fromElement);
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

@Override
public PersistentStateComponent<?> getSerializer() {
  return this;
}

public abstract PersistentStateComponent<?> getSerializer();

public abstract PersistentStateComponent<?> getSerializer();

void reloadState(@NotNull Class<? extends PersistentStateComponent<?>> componentClass);

public abstract PersistentStateComponent<?> getSerializer();

public abstract PersistentStateComponent<?> getSerializer();

public abstract PersistentStateComponent<?> getSerializer();

public abstract PersistentStateComponent<?> getSerializer();

public void addChild(@NotNull VirtualFileSystemEntry child) {
  final String childName = child.getName();
  final boolean ignoreCase = !getFileSystem().isCaseSensitive();
  synchronized (myData) {
    int indexInReal = findindex(myData.myChildrenIds,childName,ignoreCase);

    myData.removeAdoptedname(childName);
    if (indexInReal < 0) {
      insertChildAt(child,indexInReal);
      ((PersistentFSImpl)PersistentFS.getInstance()).incStructuralModificationCount();
    }
    // else already stored
    assertConsistency(ignoreCase,child);
  }
}

public void setNewName(@NotNull String newName) {
  if (!isValidName(newName)) {
    throw new IllegalArgumentException(VfsBundle.message("file.invalid.name.error",newName));
  }

  VirtualDirectoryImpl parent = getParent();
  parent.removeChild(this);
  mySegment.setNameId(myId,FileNameCache.storeName(newName));
  ((PersistentFSImpl)PersistentFS.getInstance()).incStructuralModificationCount();
  parent.addChild(this);
}

public void testFileLength() throws Exception {
  File file = FileUtil.createTempFile("test","txt");
  FileUtil.writetoFile(file,"hello");
  VirtualFile virtualFile = myFS.refreshAndFindFileByIoFile(file);
  assertNotNull(virtualFile);
  String s = VfsutilCore.loadText(virtualFile);
  assertEquals("hello",s);
  assertEquals(5,virtualFile.getLength());

  FileUtil.writetoFile(file,"new content");
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
  s = VfsutilCore.loadText(virtualFile);
  assertEquals("new content",s);
  assertEquals(11,virtualFile.getLength());
}

public void testFileLength() throws Exception {
  File file = FileUtil.createTempFile("test","hello");
  VirtualFile virtualFile = LocalFileSystem.getInstance().refreshAndFindFileByIoFile(file);
  assertNotNull(virtualFile);
  String s = VfsutilCore.loadText(virtualFile);
  assertEquals("hello",virtualFile.getLength());
}

public void testFileLength() throws Exception {
  File file = FileUtil.createTempFile("test",virtualFile.getLength());
}

public void addChild(@Nonnull VirtualFileSystemEntry child) {
  final String childName = child.getName();
  final boolean ignoreCase = !getFileSystem().isCaseSensitive();
  synchronized (myData) {
    int indexInReal = findindex(myData.myChildrenIds,child);
  }
}

public void setNewName(@Nonnull String newName) {
  if (!getFileSystem().isValidName(newName)) {
    throw new IllegalArgumentException(VfsBundle.message("file.invalid.name.error",FileNameCache.storeName(newName));
  ((PersistentFSImpl)PersistentFS.getInstance()).incStructuralModificationCount();
  parent.addChild(this);
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private void removeFromArray(int index) {
  myData.myChildrenIds = ArrayUtil.remove(myData.myChildrenIds,index);
  ((PersistentFSImpl)PersistentFS.getInstance()).incStructuralModificationCount();
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private static void cleanPersistedVFSContent() {
  ((PersistentFSImpl)PersistentFS.getInstance()).cleanPersistedContents();
}

private void removeFromArray(int index) {
  myData.myChildrenIds = ArrayUtil.remove(myData.myChildrenIds,index);
  ((PersistentFSImpl)PersistentFS.getInstance()).incStructuralModificationCount();
}