Session/login lifetime

[stv0g]

In GitLab by @windrad6 on Feb 22, 2019, 19:42

The system does not logout after a certain time. I'm not sure if this behavior is intended.

[stv0g]

Right now it is intended.

What would be your favoured session lifetime?

Maybe we can reduce to to the lifetime of the browser session?

[stv0g]

marked this issue as related to #196

[stv0g]

In GitLab by @windrad6 on Feb 25, 2019, 11:06

Maybe a lifetime would be good. If someone is using the system on a shared computer we don’t want others to access the website.

[stv0g]

In GitLab by @skolen on Oct 11, 2019, 09:55

The new backend will give you an authentication token with a limited validity time. That will solve the problem. We should agree on the duration of the validity period.

[stv0g]

In GitLab by @skolen on Mar 23, 2020, 14:16

Validity of session token is currently configured to 1 week, we can reduce this if required.

[stv0g]

In GitLab by @skolen on Mar 23, 2020, 14:16

closed