sinamics / ztnet

ZTNET - ZeroTier Web UI for Private Controllers with Multiuser and Organization Support.
https://ztnet.network
GNU General Public License v3.0
587 stars 60 forks source link

Set user device cookie maxAge to 1 year #537

Closed sinamics closed 3 months ago

sinamics commented 3 months ago

User device maxAge was previously set to session, as i belived this was the same as never, but session will terminate when browser is closed.

Updated device cookie to have maxAge of 1 year. image

Cookie expire date is not dynamically updated, so the user device will be invalidated in 1 year. This could be improved by udpate the cookie when user interact with ztnet.

Related #526