使用处理程序（ashx）时如何防止会话超时计时器重置？

Question

I'm using a handler to poll certain information out my application. I've got some questions about using the handler in combination with session timeout:

1. Does a call to the handler reset the session timeout timer?
2. If so, are there ways to prevent a reset of this timer?

Due to security reasons I would not like my handler to be the cause that my user is logged on indefinitely.

Answer 1

1. Yes
2. Run the handler in a different web app

Answer 2

The only solution I can think of is to do some kind of manual session timeout handling. Something like this:

void Application_BeginRequest(object sender, EventArgs e)
{
    if(Session["LastAccessTime"] != null && (DateTime)Session["LastAccessTime"] < DateTime.Now.AddMinutes(-20))
        Session.Abandon();

    if(Request.RawUrl != "/MyHandler.ashx")
        Session["LastAccessTime"] = DateTime.Now;
}