Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

FEATURE: Increase default DiscourseConnect session length (#26261) 

For some identity providers, 10 minutes isn't much time for a user to complete authentication/registration on the identity provider. Increasing the default to 30 minutes should help in those situations. The nonce is still tied to a single browser session, so there is no material impact on security.
This commit is contained in:
David Taylor 2024-03-20 14:02:12 +00:00 committed by GitHub
parent 16b377bc3f
commit aba0df7cf7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/discourse_connect_base.rb
View File

@ -59,7 +59,7 @@ class DiscourseConnectBase
] ]
def self.nonce_expiry_time def self.nonce_expiry_time
@nonce_expiry_time ||= 10.minutes @nonce_expiry_time ||= 30.minutes
end end
def self.nonce_expiry_time=(v) def self.nonce_expiry_time=(v)