openflighthpc / flight-control

0 stars 0 forks source link

SSO cookie expiry and impact on Flight Center logins #32

Closed timalces closed 2 years ago

timalces commented 2 years ago

Some issues have recently been seen logging in to Flight Center. We should investigate if this is due to the SSO implementation in Control and if so implement a fix.

Hypothesis: if a user logins to Flight Control and then tries to log in to Flight Center the following day (more than 24 hours later), login to Flight Center fails (get invalid username or password errors). Control is creating the flight_sso cookie with an expiry of session, whereas Center creates one with an expiry of 24 hours later (or 100 years later if 'remember me' is selected). Doing likewise in Control may resolve the issue.