You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In our local stack, users seem to get logged out of Fizzy more often than expected, while Campfire sessions stay stable. I checked the Fizzy source and found:
magic-link lifetime is hardcoded to 15 min in app/models/magic_link.rb
the pending-auth cookie also expires with the magic link in app/controllers/concerns/authentication/via_magic_link.rb
the signed-in session cookie is set with cookies.signed.permanent[:session_token] in app/controllers/concerns/authentication.rb
Session itself does not appear to have built-in expiry logic in app/models/session.rb
Questions:
Is there any supported config/env var for browser session lifetime or session invalidation behavior that we should be using?
If not, is the intended explanation that signed-in sessions should persist indefinitely unless SECRET_KEY_BASE changes, cookies are lost, or session rows are removed?
Is there a recommended dev-mode setup for more stable browser sessions when using the magic-link login flow locally?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
In our local stack, users seem to get logged out of Fizzy more often than expected, while Campfire sessions stay stable. I checked the Fizzy source and found:
app/models/magic_link.rbapp/controllers/concerns/authentication/via_magic_link.rbcookies.signed.permanent[:session_token] inapp/controllers/concerns/authentication.rbapp/models/session.rbQuestions:
All reactions