Session expiry, especially when editing routes

sfreytag / simonlikesmaps

Project management for https://www.simonlikesmaps.com

0 stars 0 forks source link

Session expiry, especially when editing routes #41

Closed sfreytag closed 7 months ago

sfreytag commented 2 years ago

The google account cookie is still set to 2 weeks, but it seems the app now loses the session every ~24hrs. You can quickly log back in without a password by bouncing via google auth so the session does exist in google, but gets lost in the browser? This is slightly annoying when using SLM regularly but also increasing the possibility of your session expiring while you are midway through editing a route, and then it will fail when you save the route because of a missing user.

sfreytag commented 2 years ago

the SACSID cooke does now seem to be session rather than persistent.

sfreytag commented 2 years ago

Related to making everything https?

sfreytag commented 1 year ago

This is definitely an HTTPS thing. Unlikely to fix this within current AppEngine / Google Cloud environment. Will be a longer-term fix.

sfreytag commented 1 year ago

SLM2 now using JWT with 30-day expiry

sfreytag commented 7 months ago

SLM2 now available to try - https://new.simonlikesmaps.com

Sessions are 30 days as above, plus refresh tokens are planned in #50

--> good enough to close this