Is there any reason you need logins to time out as frequently as they do?
If there was anything confidential about what we're posting here, I'd be all in favor. But I've had to log in three times today.
Thanks for the suggestion. We'll explore it.
Ambrose Little "]Thanks for the suggestion. We'll explore it.
How's the exploration going. I currently have to log in about five times a day. This encourages me to read and delete the email notices I get when I might otherwise offer a reply.
Of course, that does serve to protect Helen E's position as the number 1 guru in the WebGrid forum.
It's not that hard to login, is it?? I do it several times a day, too.
The thing is that we have this tied to SSO w/ your main Infragistics ID, so we have it setup to timeout with that. The reason we don't want to extend your main ID timeout is because all of our keys, training, and profile info are associated with your ID, and there is a potential for a session replay attack there which we want to mitigate by having a shorter timeout.
That said, it does seem feasible that we could extend just the forums timeout without affecting the main site. This might cause some odd behavior--where you're logged into forums but not into the main site, but there are worse things I suppose. It is on our TODO list to consider and likely implement, but don't look for it any time in the immediate future. Sorry! You could alternatively use Windows Live Mail or something if the logging in really bothers you.
Ambrose Little "] It's not that hard to login, is it?? I do it several times a day, too. The thing is that we have this tied to SSO w/ your main Infragistics ID, so we have it setup to timeout with that. The reason we don't want to extend your main ID timeout is because all of our keys, training, and profile info are associated with your ID, and there is a potential for a session replay attack there which we want to mitigate by having a shorter timeout. That said, it does seem feasible that we could extend just the forums timeout without affecting the main site. This might cause some odd behavior--where you're logged into forums but not into the main site, but there are worse things I suppose. It is on our TODO list to consider and likely implement, but don't look for it any time in the immediate future. Sorry! You could alternatively use Windows Live Mail or something if the logging in really bothers you.
If your server and my internet connection were both as fast as we wish they were, I wouldn't squawk, but the two extra postbacks each add about 15 seconds to the process. That's not enough to make me avoid logging in completely, but it is enough to make me think twice if I'm feeling hurried. (And I have to admit, it's nowhere near as slow as the Micro$oft site.)
I wonder how many people would even notice that the timeout for your main site differs from that of your forums, especially if the time-out is based on a specified period of inactivity, as opposed to one based purely upon how long a person has been logged in.
I just logged in, and it took me about 1 second total. I'm very concerned about the timeframe you mention. You're not the first to mention it, but I've used these forums a lot here and at home w/ very little slowness, certainly not > a second or two. We're going to continue to look into this perf issue.
Anyways, we will most likely up the forum timeout; it's just a matter of resource bandwidth on when we can get to it at this point. Thanks again for the feedback.
As you may or may not have noticed, we have increased the cookie timeout value to allow for much longer (currently set to 2 weeks with sliding expiration) login periods. It is important to point out that the Forums authentication and main website authentication are tracked using two seperate cookies that will now expire at different times. This change carries with it a few side-effects, particularly:
However, I think the convenience of staying logged-in for extended periods of time should far outweigh any of these side-effects. And, of course, if you need to log out sooner just click the "Sign Out" link at the top of every page!
Enjoy!
Thank you very much. Not having to log in more than once a day is a real blessing.