How do you cancel someone's persistent cookie if their membership is no longer valid?

I'm designing a small ASP.NET MVC site for a club. Generally, I want users to be able to stay logged in, but what happens if a user's membership has lapsed? Is there any way to "de-authorize" them so that next time they try to view a pa开发者_开发百科ge, it redirects them to a page telling them their membership has lapsed?

If the timeout defined for the authentication cookie is hit it will no longer be valid and users will automatically be redirected to the login page. If you want to sign them out automatically under some circumstances you could simply:

FormsAuthentication.SignOut();

Why don't you make the expiration of the authentication cookie, the number of days that you want, or their membership expiration date, whichever is sooner, then you get the benefit of getting handled automatically

When you get the user's information from the cookie, you could add a check to see if their membership has lapsed and redirect them to that page.