Authentication: JWT usage vs session

JWT doesn’t have a benefit over using “sessions” per se. JWTs provide a means of maintaining session state on the client instead of doing it on the server. What people often mean when asking this is “What are the benefits of using JWTs over using Server-side sessions“. With server-side sessions, you will either have to store … Read more

Session timeout in ASP.NET

I am running an ASP.NET 2.0 application in IIS 6.0. I want session timeout to be 60 minutes rather than the default 20 minutes. I have done the following Set <sessionState timeout=”60″></sessionState> in web.config. Set session timeout to 60 minutes in IIS manager/Web site properties/ASP.NET configuration settings. Set idle timeout to 60 minutes in application pool properties/performance. I … Read more