How do you programmatically end a session in asp.net when Session.Abandon() doesn't work?

c# asp.net authentication session membership
Slim picture Slim · May 12, 2009 · Viewed 48.8k times · Source

Session.Abandon() doesn't seem to do anything. You would expect the Session_end event to fire when Session.Abandon() is called.

Answer

Noldorin picture Noldorin · May 12, 2009

This is most likely because your SessionMode is not InProc (the only one that can detect when a session ends).

Quoted from MSDN:

Session Events

ASP.NET provides two events that help you manage user sessions. The Session_OnStart event is raised when a new session starts, and the Session_OnEnd event is raised when a session is abandoned or expires. Session events are specified in the Global.asax file for an ASP.NET application.

The Session_OnEnd event is not supported if the session Mode property is set to a value other than InProc, which is the default mode.

Related questions

how to generate a unique token which expires after 24 hours?

I have a WCF Webservice which checks if the user is valid. If the user is valid I want to generate a token which expires after 24 hours. public bool authenticateUserManual(string userName, string password,string language,string token) { if (Membership.…

Read More
Custom Authentication in ASP.Net-Core

I am working on a web app that needs to integrate with an existing user database. I would still like to use the [Authorize] attributes, but I don't want to use the Identity framework. If I did want to use …

Read More
ASP.NET Core Web API Authentication

I'm struggling with how to set up authentication in my web service. The service is build with the ASP.NET Core web api. All my clients (WPF applications) should use the same credentials to call the web service operations. After …

Read More