You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
With the latest addition of session renewal for as long as you are active, this is as perfect at time as ever to add a checkbox on the login screen "Keep me Logged In".
If this box is checked when the user clicks login, it will include that boolean when it sends the login credentials.
On the server-side, we reduce the expiry time of session tokens to a few days (located in config.js), and we add another variable for storing the duration of "extended sessions", which will last six months (if never renewed). If this "keep me logged in" boolean is present, loginController.handleLogin() will pass that as an argument to createNewSession(), which should trigger it to use the longer expiry time when issuing the new session.
Generated session tokens inside refreshTokenObject.addTokenToRefreshTokens() also need to store this boolean of whether or the session is of the extended type. When the session is renewed within sessionManager.renewSession(), we renew it for the same six months if that boolean is present on the session token.
The text was updated successfully, but these errors were encountered:
With the latest addition of session renewal for as long as you are active, this is as perfect at time as ever to add a checkbox on the login screen "Keep me Logged In".
If this box is checked when the user clicks login, it will include that boolean when it sends the login credentials.
On the server-side, we reduce the expiry time of session tokens to a few days (located in config.js), and we add another variable for storing the duration of "extended sessions", which will last six months (if never renewed). If this "keep me logged in" boolean is present, loginController.handleLogin() will pass that as an argument to createNewSession(), which should trigger it to use the longer expiry time when issuing the new session.
Generated session tokens inside refreshTokenObject.addTokenToRefreshTokens() also need to store this boolean of whether or the session is of the extended type. When the session is renewed within sessionManager.renewSession(), we renew it for the same six months if that boolean is present on the session token.
The text was updated successfully, but these errors were encountered: