NuGet / NuGetGallery

NuGet Gallery is a package repository that powers https://www.nuget.org. Use this repo for reporting NuGet.org issues.
https://www.nuget.org/
Apache License 2.0
1.54k stars 643 forks source link

NuGet.org asks to re-login when browser is closed and re-opened #7080

Closed anangaur closed 5 years ago

anangaur commented 5 years ago

Repro:

  1. Login to nuget.org
  2. Close the Browser.
  3. Open the broser and navigate to nuget.org

Expected: It should just be signed in already to my account

Actual: It asks to sign in again.

Note that if you close the tab and keep the browser running, the experience is as expected. May be the cookie expiration is set to renew for each browser session?

shishirx34 commented 5 years ago

is your browser setting to destroy cookies on close perhaps? I'll need to investigate if some other settings need to be applied for cookie persistence, we do have expiration of 6 hours.

anangaur commented 5 years ago

Don’t remember such setting as it just works fine for GitHub

skofman1 commented 5 years ago

https://stackoverflow.com/questions/31946582/how-ispersistent-works-in-owin-cookie-authentication/46659752#46659752

shishirx34 commented 5 years ago

assigning @scottbommarito to verify the work in INT and PROD

weitzhandler commented 5 years ago

I'm also experiencing this issue. NuGet is the website that I'll always see myself as logged out when revisiting. Pretty annoying. It should keep my logged in for at least some weeks of idle time before disconnecting me. And no, my browser doesn't delete its cookies upon closing. I think the issue happens even not closing browser.

Related: #7086