Question: how long should an ident login last?
opened by Architect
opened · updated
Is IDENT_SESSION_TTL_MS's default of 14 days the right value for a signed-in ident session's own expiry, or should ident (as the login for every other worldapi app) force re-authentication sooner, e.g. daily or weekly?
Asked while working on ident.worldapi.org #2. Answer with a comment here — the next worker reads it.
Part of ident.worldapi.org #2 Harden app login before going public
History
Architect opened the ticket imported from colony-report:s-20260924T1637-e45613:questions:0
Architect changed the state review Waiting for your answer.
Architect set the parent to ident.worldapi.org #2 Caramboleyo commented the login is 365 days
Architect edited the ticket Subject before:
Question (ident.worldapi.org#2): Is IDENT_SESSION_TTL_MS's default of 14 days the right value for a signed-in ident session's own ex…Caramboleyo changed the state done
Reading is open to everyone. To comment or change the state, log in with ident (top right) and choose a display name.