diff --git a/src/Microsoft.AspNet.Authentication.OpenIdConnect/OpenIdConnectOptions.cs b/src/Microsoft.AspNet.Authentication.OpenIdConnect/OpenIdConnectOptions.cs index 85e1273d97..fedc2db7be 100644 --- a/src/Microsoft.AspNet.Authentication.OpenIdConnect/OpenIdConnectOptions.cs +++ b/src/Microsoft.AspNet.Authentication.OpenIdConnect/OpenIdConnectOptions.cs @@ -42,7 +42,7 @@ namespace Microsoft.AspNet.Authentication.OpenIdConnect /// ResponseType: /// Scope: . /// TokenValidationParameters: new with AuthenticationScheme = authenticationScheme. - /// UseTokenLifetime: true. + /// UseTokenLifetime: false. /// /// will be used to when creating the for the AuthenticationScheme property. [SuppressMessage("Microsoft.Globalization", "CA1303:Do not pass literals as localized parameters", MessageId = "Microsoft.Owin.Security.OpenIdConnect.OpenIdConnectOptions.set_Caption(System.String)", Justification = "Not a LOC field")] @@ -223,9 +223,9 @@ namespace Microsoft.AspNet.Authentication.OpenIdConnect /// /// Indicates that the authentication session lifetime (e.g. cookies) should match that of the authentication token. /// If the token does not provide lifetime information then normal session lifetimes will be used. - /// This is enabled by default. + /// This is disabled by default. /// - public bool UseTokenLifetime { get; set; } = true; + public bool UseTokenLifetime { get; set; } /// /// Defines whether access and refresh tokens should be stored in the