microsoft / community-organization-operations-suite

Applications & tools for Community-Based Organizations (CBOs) to work together more effectively
MIT License
12 stars 7 forks source link

Should user re-authenticate when app returns online? #658

Open mdeitner opened 2 years ago

mdeitner commented 2 years ago

When signed in offline, and then app regains internet connection should the app require new login?

Someone could steal a device while online. User could sign in offline using fake password (by changing hash in dev tools, in this case they would not be able to decrypt browser data) then when app returns online the user would have access to server data. So we may want to require a login when going back online. This would get annoying if connection was intermittent. Maybe we could add toggle to stay offline. Something to get feedback on.