rough session timeout

2026-03-19 03:00:09 +00:00
parent 5f15d92903
commit f3d6df2f82
5 changed files with 82 additions and 5 deletions
--- a/Seasoned.Backend/Program.cs
+++ b/Seasoned.Backend/Program.cs
@@ -23,6 +23,22 @@ builder.Services.AddIdentityApiEndpoints<IdentityUser>( options => {
 })
    .AddEntityFrameworkStores<ApplicationDbContext>();

+builder.Services.ConfigureApplicationCookie(options =>
+{
+    options.Cookie.Name = "Seasoned.Session";
+    options.Cookie.HttpOnly = true;
+    options.Cookie.SameSite = SameSiteMode.None;
+    options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
+    
+    options.ExpireTimeSpan = TimeSpan.FromMinutes(30);
+    options.SlidingExpiration = true; 
+    options.Events.OnRedirectToLogin = context =>
+    {
+        context.Response.StatusCode = StatusCodes.Status401Unauthorized;
+        return Task.CompletedTask;
+    };
+});    
+
 builder.Services.AddAuthorization();

 builder.Services.AddControllers()