consent expire

[BÖSCH Christian]

> On 22.05.2019, at 12:24 , Peter Schober <peter.schober at univie.ac.at <mailto:peter.schober at univie.ac.at>> wrote:
> 
> * Peter Schober <peter.schober at univie.ac.at <mailto:peter.schober at univie.ac.at>> [2019-05-22 12:11]:
>> * BÖSCH Christian <boesch at fhv.at <mailto:boesch at fhv.at>> [2019-05-22 11:02]:
>>> Is it somehow possible to set the expiration date of the consent
>>> (idp.consent.storageRecordLifetime) to infinity?
>> 
>> I don't know but is that really all that different from setting it to,
>> say, ten years?

Yes, I’ve set it to 10 years.

So that the existing entries do not expire I corrected them in the database and set them to sometime in 2030.
update storagerecords set expires='1920000000000' where id like '%:terms-of-use’; 

Nevertheless, I see in the consent log file that terms of use are continuously accepted.

Is there anything else to consider so that the terms of use do not have to be accepted again?

Thanks,
Christian

> 
> FWIW, I don't see provisions in the code that would allow for that,
> e.g. using a special value to signal "infinite":
> 
> @Nonnull @Duration @NonNegative private Long lifetime
> 
> "Lifetime must be greater than or equal to 0"
> 
> etc.
> 
> -peter
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg <https://wiki.shibboleth.net/confluence/x/coFAAg>
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190522/ceaec7cb/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3492 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190522/ceaec7cb/attachment.p7s>