I have the following settings in my web.config file. It basically restricts access to a page if the user is not logged in. If I don\'t want to use the asp login controls or
// formsAuth does not expose timeout!? have to hack around the
// spoiled parts and keep moving..
HttpCookie fooCookie = FormsAuthentication.GetAuthCookie("foo", true);
int formsTimeout = Convert.ToInt32((fooCookie.Expires - DateTime.Now).TotalMinutes);
Forms Authentication does expose timeout as of .Net 4.0 FormsAuthentication.Timeout.TotalMinutes