4 ms·
No, the client would need to renew the cookie every 2.5 mins (similar approach to DHCP leases). If the external IP has changed, the cookie should not be renewed
by oarsinsync 5y ago
No, the client would need to renew the cookie every 2.5 mins (similar approach to DHCP leases). If the external IP has changed, the cookie should not be renewed. If it's expired already, it should not be renewed.
This wont work, though, as nobody wants to sign in once per day. That's too inconvenient.
- halestock 5y agoFor customers, yes, but I've worked at places where we required employees to re-auth daily (if not more frequently).
- throw_away 5y agoI worked at a place where re-auth was required every twelve hours, which was a convenient reminder of when you'd been working way too long.
- sneak 5y agoIf you are using SSO (to enforce U2F) and password managers (really, basic levels of enterprise auth competence in 2021) then signing in multiple times per day isn't a huge hassle because it's just a click and a tap.
- deleted 5y ago[deleted]