diff --git a/src/Infrastructure/BotSharp.Abstraction/Infrastructures/SharpCacheAttribute.cs b/src/Infrastructure/BotSharp.Abstraction/Infrastructures/SharpCacheAttribute.cs
index dd30f491..c8b29ecd 100644
--- a/src/Infrastructure/BotSharp.Abstraction/Infrastructures/SharpCacheAttribute.cs
+++ b/src/Infrastructure/BotSharp.Abstraction/Infrastructures/SharpCacheAttribute.cs
@@ -71,7 +71,7 @@ public class SharpCacheAttribute : MoAttribute
 
     private string GetCacheKey(SharpCacheSettings settings, MethodContext context)
     {
-        var key = settings.Prefix + "-" + context.Method.Name;
+        var key = settings.Prefix + ":" + context.Method.Name;
         foreach (var arg in context.Arguments)
         {
             if (arg is null)
diff --git a/src/Infrastructure/BotSharp.Core/Users/Services/UserService.cs b/src/Infrastructure/BotSharp.Core/Users/Services/UserService.cs
index 4e7c1248..e565a9b5 100644
--- a/src/Infrastructure/BotSharp.Core/Users/Services/UserService.cs
+++ b/src/Infrastructure/BotSharp.Core/Users/Services/UserService.cs
@@ -359,7 +359,7 @@ public class UserService : IUserService
 
     private string GetUserTokenExpiresCacheKey(string userId)
     {
-        return $"user_{userId}_token_expires";
+        return $"user:{userId}_token_expires";
     }
 
     public async Task<DateTime> GetUserTokenExpires()
diff --git a/src/Infrastructure/BotSharp.OpenAPI/Filters/UserSingleLoginFilter.cs b/src/Infrastructure/BotSharp.OpenAPI/Filters/UserSingleLoginFilter.cs
index e8db0801..dda71f48 100644
--- a/src/Infrastructure/BotSharp.OpenAPI/Filters/UserSingleLoginFilter.cs
+++ b/src/Infrastructure/BotSharp.OpenAPI/Filters/UserSingleLoginFilter.cs
@@ -1,80 +1,78 @@
 using BotSharp.Abstraction.Users.Settings;
 using Microsoft.AspNetCore.Authentication.JwtBearer;
 using Microsoft.AspNetCore.Mvc.Filters;
-using Microsoft.Extensions.Configuration;
 using Microsoft.Net.Http.Headers;
 using System.IdentityModel.Tokens.Jwt;
 
-namespace BotSharp.OpenAPI.Filters
-{
-    public class UserSingleLoginFilter : IAuthorizationFilter
-    {
-        private readonly IUserService _userService;
-        private readonly IServiceProvider _services;
+namespace BotSharp.OpenAPI.Filters;
 
-        public UserSingleLoginFilter(IUserService userService, IServiceProvider services)
+public class UserSingleLoginFilter : IAuthorizationFilter
+{
+    private readonly IUserService _userService;
+    private readonly IServiceProvider _services;
+
+    public UserSingleLoginFilter(IUserService userService, IServiceProvider services)
+    {
+        _userService = userService;
+        _services = services;
+    }
+
+    public void OnAuthorization(AuthorizationFilterContext context)
+    {
+        var isAllowAnonymous = context.ActionDescriptor.EndpointMetadata
+            .Any(em => em.GetType() == typeof(AllowAnonymousAttribute));
+
+        if (isAllowAnonymous)
         {
-            _userService = userService;
-            _services = services;
+            return;
         }
 
-        public void OnAuthorization(AuthorizationFilterContext context)
+        var bearerToken = GetBearerToken(context);
+        if (!string.IsNullOrWhiteSpace(bearerToken))
         {
-            var isAllowAnonymous = context.ActionDescriptor.EndpointMetadata
-                .Any(em => em.GetType() == typeof(AllowAnonymousAttribute));
+            var config = _services.GetRequiredService<AccountSetting>();
+            var token = GetJwtToken(bearerToken);
 
-            if (isAllowAnonymous)
+            if (config.AllowMultipleDeviceLoginUserIds.Contains(token.Claims.First(x => x.Type == "nameid").Value))
             {
                 return;
             }
 
-            var bearerToken = GetBearerToken(context);
-            if (!string.IsNullOrWhiteSpace(bearerToken))
+            var validTo = token.ValidTo.ToLongTimeString();
+            var currentExpires = GetUserExpires().ToLongTimeString();
+
+            if (validTo != currentExpires)
             {
-                var config = _services.GetRequiredService<AccountSetting>();
-                var token = GetJwtToken(bearerToken);
-
-                if (config.AllowMultipleDeviceLoginUserIds.Contains(token.Claims.First(x => x.Type == "nameid").Value))
-                {
-                    return;
-                }
-
-                var validTo = token.ValidTo.ToLongTimeString();
-                var currentExpires = GetUserExpires().ToLongTimeString();
-
-                if (validTo != currentExpires)
-                {
-                    Serilog.Log.Warning($"Token expired. Token expires at {validTo}, current expires at {currentExpires}");
-                    // login confict
-                    context.Result = new ConflictResult();
-                }
+                Serilog.Log.Warning($"Token expired. Token expires at {validTo}, current expires at {currentExpires}");
+                // login confict
+                context.Result = new ConflictResult();
             }
         }
-
-        private string GetBearerToken(AuthorizationFilterContext context)
-        {
-            if (context.HttpContext.Request.Headers.TryGetValue(HeaderNames.Authorization, out var bearerToken)
-               && !string.IsNullOrWhiteSpace(bearerToken.ToString()))
-            {
-                var tokenType = bearerToken.ToString().Split(" ").First();
-                if (tokenType == JwtBearerDefaults.AuthenticationScheme)
-                {
-                    return bearerToken.ToString().Split(" ").Last();
-                }
-            }
-            return null;
-        }
-
-        private JwtSecurityToken GetJwtToken(string jwtToken)
-        {
-            var handler = new JwtSecurityTokenHandler();
-            var token = handler.ReadJwtToken(jwtToken);
-            return token;
-        }
-
-        private DateTime GetUserExpires()
-        {
-            return _userService.GetUserTokenExpires().GetAwaiter().GetResult();
-        }
+    }
+
+    private string GetBearerToken(AuthorizationFilterContext context)
+    {
+        if (context.HttpContext.Request.Headers.TryGetValue(HeaderNames.Authorization, out var bearerToken)
+           && !string.IsNullOrWhiteSpace(bearerToken.ToString()))
+        {
+            var tokenType = bearerToken.ToString().Split(" ").First();
+            if (tokenType == JwtBearerDefaults.AuthenticationScheme)
+            {
+                return bearerToken.ToString().Split(" ").Last();
+            }
+        }
+        return null;
+    }
+
+    private JwtSecurityToken GetJwtToken(string jwtToken)
+    {
+        var handler = new JwtSecurityTokenHandler();
+        var token = handler.ReadJwtToken(jwtToken);
+        return token;
+    }
+
+    private DateTime GetUserExpires()
+    {
+        return _userService.GetUserTokenExpires().GetAwaiter().GetResult();
     }
 }