[JIRA] (IDP-2124) Allow session cookie to be persistent
Scott Cantor (Jira)
jira at shibboleth.atlassian.net
Wed May 31 19:42:52 UTC 2023
Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-2124 ( https://shibboleth.atlassian.net/browse/IDP-2124?atlOrigin=eyJpIjoiNWU2ZmZjOTQ2MmM5NGMzZWI4YjE2ZWU5ZmNjYTg3YzgiLCJwIjoiaiJ9 )
Re: Allow session cookie to be persistent ( https://shibboleth.atlassian.net/browse/IDP-2124?atlOrigin=eyJpIjoiNWU2ZmZjOTQ2MmM5NGMzZWI4YjE2ZWU5ZmNjYTg3YzgiLCJwIjoiaiJ9 )
The cookie’s lifetime has nothing to do with SSO other than the obvious, it’s an upper bound. Authentication results are valid for as long as they’re told to be, years or longer. Getting that data to persist is also not a problem, but the index into the data is in the cookie that’s disappearing.
So yes, the missing piece is making the cookie persistent. The rest is policy and is already configurable. If you never deleted the session cookies (as most browsers now do not), you can already make SSO last as long as you want, it’s only constrained by the cookie not disappearing.
( https://shibboleth.atlassian.net/browse/IDP-2124#add-comment?atlOrigin=eyJpIjoiNWU2ZmZjOTQ2MmM5NGMzZWI4YjE2ZWU5ZmNjYTg3YzgiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2124#add-comment?atlOrigin=eyJpIjoiNWU2ZmZjOTQ2MmM5NGMzZWI4YjE2ZWU5ZmNjYTg3YzgiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:a994ca2 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/d915c7db/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-c76ac8f0-07a2-4f74-9374-9c78d1aa15ff
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/d915c7db/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-721f7c81-fb36-44bc-8604-52562e3f6beb
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/d915c7db/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-1c0b25e6-8b15-4b7e-b0e0-620f1bca021e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/d915c7db/attachment-0005.png>
More information about the commits
mailing list