I have integrated an ASP.NET MVC 4 app with a legacy ASP.NET 4 Webforms app. The webforms app used SQL Membership Provider to implement the security features with Forms authentication mode , so I've kept that security in the newly integrated app as well. I am using [authorize] attribute on some MVC action methods to protect some MVC views. This all works fine except that the MVC pages (Views) timeout earlier than the timeouts set for forms authentication and the sessionState as shown below in the web.config file
<authentication mode="Forms">
<forms loginUrl="~/Account/Login.aspx" timeout="2880" />
</authentication>
<sessionState mode="InProc" customProvider="DefaultSessionProvider" timeout="600">
As you can see that the timeouts are set for several hours. Yet the MVC views timeout after about 30 minutes whereas webforms pages don't timeout in the same app. Why it's happening and how can it be resolved?
