freeipa

#5771 don't expire session cookies
Opened by pvoborni. Modified

Open
Close Issue

API Session Cookies has expires: server time + 20mins.

In a case where browser is 20mins or more ahead than server, Web UI stops working.

We don't have to rely on cookie expiration because server should return 401 anyway if the session is expired. Therefore the case above is valid.

Resolution:

  • set cookie Expires to a distant future
  • set cookie Max-Age, e.g., to a year (3652460*60)

Metadata Update from @pvoborni:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

This would be mitigated by https://pagure.io/freeipa/issue/5015 (or vice versa).

Metadata Update from @rcritten:
- Issue close_status updated to: None
Metadata
None
None
None
Normal
defect
IPA
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.