There are a couple of things I need to know about how persistent cookies are used in DNN.
First, when & what core modules set persistent cookies & what is stored in them? According to my reaserch, persistent cookies are set up only when 'Remember Me' is checked, while logging in, and user roles are encrypted & stored in it. Am I wrong or Is there anything missing?
In that case, if I hide the 'Remember Me' option, can I be sure that no Authentication persistent cookie would be set up on the client.
Second, how do I control their behaviour. I found an element
<add key="PersistentCookieTimeout" value="0" />
in appSettings section. Say, I want all persistent cookies to expire after 60 minutes. Would setting "60" here do the task (i.e. does this value control Persistent Cookie behaviour)???
Lastly, can in any way I request DNN to reject & reset all persistent cookies for some duration of time (say for the next 30 minutes)???