Client persistent storage not remembering user

Cantor, Scott cantor.2 at osu.edu
Thu Apr 19 20:25:46 EDT 2018


> I did not exactly understand what’s funny. I did not mean that using session
> cookie and a bad behaviour of chrome was a good thing. Not at all. May be
> my explanations were not clear enough.

I was referring to the fact that you seem to want sessions to survive restarts (and longer), and most people are a lot more concerned abot the fact that sessions tend to survive restarts at all.

> Do you think the remember me should be implemented on idp side or sp
> side ? And is this feature something you have think to implement on
> Shibboleth ?

I haven't ever given it any thought, but if an app wants somebody to be logged into it forever, that's probably something an app could handle itself.

Either end can be configured with extremely long session lifetimes anyway, but they're both programmed explicitly to use session cookies, not persistent ones.

-- Scott



More information about the users mailing list