User Sessions Should Expire

GTBitsOfGood / membership

Manage Bits of Good Members

MIT License

1 stars 0 forks source link

User Sessions Should Expire #39

Open ahijaouy opened 6 years ago

ahijaouy commented 6 years ago

Currently we are saving the user object in local storage as a way to keep sessions on the client side.

We should remove this and instead use the session cookie provided by express-session ( i think)... Set this up with an expiring cookie. Also ensure that on the frontend a user is logged out once the session expires.

jvt commented 6 years ago

So why exactly do we want to do this? This won't fix our the problem of sessions expiring while an applicant is attempting to submit an application...