codidact / qpixel

Q&A-based community knowledge-sharing software
https://codidact.com
GNU Affero General Public License v3.0
393 stars 68 forks source link

Maintain logged state for some time after browser is closed #1448

Open x80486 opened 2 weeks ago

x80486 commented 2 weeks ago

Description

I would like to bring to your attention an issue regarding session persistence that I have no doubts will enhance the user experience.

Currently, after logged in, if for any reason the browser is closed, I'm required to start a new session. Other platforms, like GitHub, maintain the user's login state for a while, even after the browser is closed.

I understand the reasoning behind this security feature, but extending the session persistence, perhaps with configurable options, could significantly improve usability without compromising security.

Oaphi commented 2 weeks ago

Known issue, we are working on it :) In particular when it comes to 2FA (but just in case - do check if you have the setting for clearing sessions on exit turned on in the browser)