When the cookie expires and we need to re-authenticate the user, the login_hint flag should be set to the email address to indicate which account to use.
We can set the cookie expiration to be much longer than the exp value inside the cookie value. This way the browser can remember the email beyond the life of the authorization.
When the cookie expires and we need to re-authenticate the user, the
login_hint
flag should be set to the email address to indicate which account to use.We can set the cookie expiration to be much longer than the
exp
value inside the cookie value. This way the browser can remember the email beyond the life of the authorization.https://developers.google.com/identity/openid-connect/openid-connect#login-hint