Skip to content

Conversation

@dvaldivia
Copy link
Collaborator

Signed-off-by: Daniel Valdivia [email protected]

@harshavardhana
Copy link
Member

So user will be logged in until 12 hours, note this doesn't change the behavior of the JWT (oauth2) you can't change the duration here beyond the JWT expiration.

@pjuarezd
Copy link
Member

pjuarezd commented Nov 7, 2022

Yes @harshavardhana is to keep the console session live during a longer period, right now it is too short (1 hour) and often we are being kicked off while still using Console

So user will be logged in until 12 hours, note this doesn't change the behavior of the JWT (oauth2) you can't change the duration here beyond the JWT expiration.

If the authorizer (oauth2 or MinIO) have a shorter period than 12h, that is OK, we'll take it.

There is plans to have a timer and end the session over a certain time of inactivity to compliment the longer sts session duration risks.

@dvaldivia dvaldivia merged commit ae2587d into minio:master Nov 7, 2022
@harshavardhana harshavardhana deleted the sts-duration-increase branch November 7, 2022 20:58
adfost pushed a commit to adfost/console that referenced this pull request Nov 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants