client IP address validation of cookies is punitive to users using mobile phones.

komuw / ong

ong, is a Go http toolkit.

MIT License

16 stars 4 forks source link

client IP address validation of cookies is punitive to users using mobile phones. #365

Closed komuw closed 9 months ago

komuw commented 10 months ago

It means that if someone moves from wifi internet to phone internet, their IP changes and cookie/session will be invalid.

https://github.com/komuw/ong/commit/d6e111ba7dd891cb122a6d7b2971504bab4165a7

komuw commented 10 months ago

I think we should give option to people to be able to use IP address validation in cookies. As well as other things they may wish, some people may want to invalidate cookies if the customers country changes, or if the customers role changes, etc.