search

volatiletech / authboss

The boss of http auth.
MIT License
3.79k stars 204 forks source link

Remember me functionality without tokens #349

Closed gaurishhs closed 10 months ago

gaurishhs commented 1 year ago

Hi! I am migrating from next-auth which is a javascript library for authentication in frontend applications, I'm porting my backend to Golang and utilizing authboss for the authentication. In next-auth JWT based system was used and JWT cookie had an expiration of 30 days. Is it possible that i use authboss-clientstate and set the max age to 30 days for the remember me functionality without actually storing any tokens?

gaurishhs commented 1 year ago

Or do i use the Expire module.. I basically want to implement remember me without actually storing any tokens.. Also, Are there any security risks if i do so