Ticket #2315 (closed enhancement: fixed)
Change Cookie expiry
Reported by: | dread | Owned by: | dread |
---|---|---|---|
Priority: | minor | Milestone: | ckan-sprint-2012-04-30 |
Component: | ckan | Keywords: | |
Cc: | Repository: | ckan | |
Theme: | none |
Description
Change login cookie from a default expiry of 50 years to 2 years. You can also uncheck a 'remember me' checkbox on the login form for the cookie to just last the session.
Background conversation on ckan-dev:
DR: I wonder if anyone objects to the expiry of the login cookie to be changed from 50 years to 2 years? 50 years might be appropriate for thedatahub.org, but for government sites it seems (to me) to be too lax.
Toby: is this the repoze.who cookie? If so that seems sensible to me.
Rufus: Definitely agree. I would also like to see introduction of a standard "remember me" checkbox (set to true by default). At the moment a login lasts forever (until you logout) automatically.
Done, with tests and bootstrapification of the form: [release-v1.6.1 b23b357]