adsabs / adsws

ADS web services
Other
2 stars 15 forks source link

accounts: last_login_at is not modified when authenticated via session cookie #53

Closed vsudilov closed 9 years ago

vsudilov commented 9 years ago

At the moment, this value is only updated on explicit authentication to /login

vsudilov commented 9 years ago

Closing; we don't want to touch last_login_at on session (cookie) authentication. oauth2client.last_activity_at should serve a good a proxy for account activity, as this is both tied to the user and updated when visiting /bootstrap.

An clear improvement on this mechanism is to update oauth2client.last_activity_atfrom API access, which bypasses/bootstrap`