question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Support expiration for session creation

See original GitHub issue

Encode an optional expiration timestamp with signed session id’s and refuse to create the session if the id is expired. Propose adding server option --session-expiration-duration which will be added to UTC now() when the signed session id is created, and then checked against UTC now() when the session is to be created in the server.

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:11 (11 by maintainers)

github_iconTop GitHub Comments

1reaction
p-himikcommented, Sep 25, 2019

@bryevdv Thanks! I think I’m still a bit confused, although it’s hard to express the exact reason. But if you have a way to proceed, I’ll probably just look at the resulting PR and see if I have any questions/concerns left.

0reactions
bryevdvcommented, Feb 14, 2020

This was closed in #9536

Read more comments on GitHub >

github_iconTop Results From Across the Web

Session Management - OWASP Cheat Sheet Series
Session Expiration. In order to minimize the time period an attacker can launch attacks over active sessions and hijack them, it is mandatory...
Read more >
How to Fix Session Has Expired Error on the Internet
If a session is not established, you can get a session expired message immediately or very shortly after connecting to or logging in...
Read more >
Configure session expiration - Sitecore Documentation
The session expiration process​​ Converts expired sessions from the tracker model to the xConnect model and submits to the xConnect Collection ( ...
Read more >
Session timeout | Granicus Support
For Self - you can set the session lifetime until a logged in user's session expires, from between 10 to 360 mins. The...
Read more >
How to specify an expiration time for the JSESSIONID that is ...
This way a REST client (e.g. web browser) can persist the JSESSIONID even between restarts of the client until the cookie expires. In...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found