Can you advise me on how to kill somebody's session and make them logout from my MVC app. My current plan is: 1)On the start of the app to load a SessionsCache 2)When user logins - save his session in tblSessions and partially reload the cache (add the session in it without making it call the DB) 3) Every 30 seconds an ajax will validate whether I have session or not 4) The administrator will have an interface tool containing all active sessions in the cache and when he kills a session he deletes it from the cache and DB 5) On the next ajax call the user wont have session and would be logouted 6) If a user logouts normally the session in the cache and DB will be deleted 7) Every 30minutes a full reload on the cache would be done
Please consider that my application has OnActionExecuting() overriden function which checks if the user has session and if not loggouts him. But this happens only on action execution and if the user doesnt click anywhere (afk) he wouldn't be redirected to home page. (considering maybe the ajax call to check session is redundant?)