Persist Session in FB and Twitter by Default

thomshouse-escher / escher

Escher was a PHP MVC framework developed by Thom Stricklin from 2011-2013. Escher implemented a hybrid of Model2 MVC and PAC architectures and CMS concepts as well as plugins and configuration wizards. Development halted in 2013 in favor of Kohana and later Symfony, which closely aligned to the same design principles as Escher.

http://git.io/escher

4 stars 1 forks source link

Persist Session in FB and Twitter by Default #22

Open adetwiler opened 12 years ago

adetwiler commented 12 years ago

Not sure if there is a way to make this configurable, but I am thinking that maybe the FB and Twitter session should persist by default?

thomshouse commented 12 years ago

I'm kinda hesitant to make this the default option with no user feedback. That could pose a major security risk if someone is using a public computer. Thoughts?

adetwiler commented 12 years ago

Good point. I wonder if there may be a good way to handle something of this manner?

thomshouse commented 12 years ago

I had thought of two possibilities:

Upon FB/Twitter login, provide feedback about successful login. Feedback message would include a link to @auth>login/facebook/persist or something similar, which would set the session to persist.
Or... Login as normal, no feedback. Provide a link in the user menu to point to @auth>login/facebook/persist.

Actually, I suppose this is not an either/or choice. I can provide an option for the feedback in the config, and you could always just add the logic for the menu item. The link will point to the same place, in either case.

adetwiler commented 12 years ago

I think that either one would be good.