What is the expected behavior of posting a form with an expired auth token in asp.net mvc with openid connect via azure ad? -
i have asp.net mvc 5 web application uses openid connect via azure ad manage user authentication. think understand once authenticated, auth token valid 1 hour @ point owin middleware handle refreshing auth token in background without user having redirected login page , re-enter username/password. have observed watching address change in address bar of browser after auth token expires.
my problem have form users stay on long time (60+ minutes) while doing interviews , entering in data. auth token expires , when user tries submit form auth token refresh happens in background , form never posted application. instead, view refreshed (from http happens after auth token refreshed) , user loses of data they've collected on last hour.
is expected behavior or have configured incorrectly?
Comments
Post a Comment