Asp.NET身份设置永久性Cookie后

Question

我已经写了下面的代码像下面刷新用户角色后，他们订阅我的网站像下面的具体时间到期：

private void RefreshUserRoles() 
     { 
      var AuthenticationManager = HttpContext.GetOwinContext().Authentication; 
      var Identity = new ClaimsIdentity(User.Identity); 
      Identity.RemoveClaim(Identity.FindFirst(ClaimTypes.Role)); 
      Identity.AddClaim(new Claim(ClaimTypes.Role, "Subscriber")); 
      AuthenticationManager.AuthenticationResponseGrant = new AuthenticationResponseGrant 
      (new ClaimsPrincipal(Identity), new AuthenticationProperties { IsPersistent = true}); 
     } 

请注意，这行代码：

AuthenticationManager.AuthenticationResponseGrant = new AuthenticationResponseGrant 
       (new ClaimsPrincipal(Identity), new AuthenticationProperties { IsPersistent = true}); 
      } 

用户回到我的网站后，我设置cookie为持久性的，但我忘了设置此cookie的到期日期。我应该将这个cookie设置为持续30分钟，之后应该要求用户重新登录系统。

由于有些用户从不重新登录网站，这给我留下了一个问题，现在我需要在访问网站时重置其浏览器中的所有用户cookie，并在取消订阅时更改其角色。我注意到一些用户取消了他们的订阅，从来没有重新记录，但尚未他们仍然能在我的网站使用功能...

所以我的问题是：

1. How to set expiration of cookie to 30 minutes after which user will be asked to re-log onto the system. 

2. How to Setup to re-check users cookies if they haven't expired in a long time so that I can reset their cookies to regular user if they cancelled subscription? 

Answer 1

这里是ConfigureAuth方法我谈论...

 public void ConfigureAuth(IAppBuilder app) 
    { 
     app.CreatePerOwinContext(ApplicationDbContext.Create); 
     app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create); 
     app.CreatePerOwinContext<ApplicationSignInManager>(ApplicationSignInManager.Create); 

     app.UseCookieAuthentication(new CookieAuthenticationOptions 
     { 
      AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie, 
      LoginPath = new PathString("/Controller/Action"), 
      Provider = new CookieAuthenticationProvider 
      { 
       OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, ApplicationUser>(
        validateInterval: TimeSpan.FromMinutes(30), 
        regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager)) 
      } 
     });    
     app.UseExternalSignInCookie(DefaultAuthenticationTypes.ExternalCookie); 

     app.UseTwoFactorSignInCookie(DefaultAuthenticationTypes.TwoFactorCookie, TimeSpan.FromMinutes(5)); 

     app.UseTwoFactorRememberBrowserCookie(DefaultAuthenticationTypes.TwoFactorRememberBrowserCookie); 

    } 

这就是我如何设置它，它适用于我。