Client persistent storage not remembering user

[Thomas Colin de Verdière]

2018-04-20 2:25 GMT+02:00 Cantor, Scott <cantor.2 at osu.edu>:

> > I did not exactly understand what’s funny. I did not mean that using
> session
> > cookie and a bad behaviour of chrome was a good thing. Not at all. May be
> > my explanations were not clear enough.
>
> I was referring to the fact that you seem to want sessions to survive
> restarts (and longer), and most people are a lot more concerned abot the
> fact that sessions tend to survive restarts at all.
>

Ok, i understand. May be it is not very clear to me what was is stored
inside the shib_idp_persistent_ss. And if it should be used or not for
remember me. But maybe not. And yes, to me, that is a problem that Chrome
does not respect specification and it is even more problematic that it does
not even warn or inform about it.


>
> > Do you think the remember me should be implemented on idp side or sp
> > side ? And is this feature something you have think to implement on
> > Shibboleth ?
>
> I haven't ever given it any thought, but if an app wants somebody to be
> logged into it forever, that's probably something an app could handle
> itself.
>
> Either end can be configured with extremely long session lifetimes anyway,
> but they're both programmed explicitly to use session cookies, not
> persistent ones.
>
>
If i had to implement "remember me feature" on the idp or sp, i would not
use extremely long lifetimes session on the server. I would rather use the
way Spring security is implementing it : http://jaspan.com/improved_
persistent_login_cookie_best_practice

What are the entry points in Shibboleth to use the Spring Security
implementation ? Does someone already do that ?

Thanks


> -- Scott
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180420/4679e43a/attachment.html>