FEATURE: Increase default DiscourseConnect session length (#26261)

For some identity providers, 10 minutes isn't much time for a user to complete authentication/registration on the identity provider. Increasing the default to 30 minutes should help in those situations. The nonce is still tied to a single browser session, so there is no material impact on security.
2024-03-20 14:02:12 +00:00 · 2024-03-20 14:02:12 +00:00 · aba0df7cf7
parent 16b377bc3f
commit aba0df7cf7
1 changed files with 1 additions and 1 deletions
--- a/lib/discourse_connect_base.rb
+++ b/lib/discourse_connect_base.rb
@ -59,7 +59,7 @@ class DiscourseConnectBase
  ]

  def self.nonce_expiry_time
-    @nonce_expiry_time ||= 10.minutes
+    @nonce_expiry_time ||= 30.minutes
  end

  def self.nonce_expiry_time=(v)