Session Closes on Browser Close

Peter Schober peter.schober at univie.ac.at
Wed Jul 3 08:54:31 EDT 2013


* Saurabh Tyagi <saurabh.tyagi at thepsi.com> [2013-07-03 14:28]:
> Can I any how over ride this ?
> By requesting cookies and changing it expiery time?
> or any thing like that?

Not really. The SP's Sessions/@cookieProps setting allows you to
specify cookie attributes for the HTTP cookie response header issued
by the SP. Given that the Expires attribute needs an absolulte value
that is not usable with the SP's config file. You may be able to
achive something with the Max-Age attribute (if your HTTP User Agents
handles that), plus tuning the SP's session store for prolonged
session lifetime.
I've not tried any of this.

> or is there any Security issue in this?

Many would say so, yes. (Not the Mozilla Firefox and Google
Chrom[e|ium] teams, though, who force this behaviour on all users of
their default configuration).
-peter


More information about the users mailing list