Comments (14)
Oh, I thought he already had been added. Thanks @harikt !
from aura.auth.
Hi @cxj ,
I have added you as a maintainer. I hope @pmjones will also agree without any hesitation .
Keep things moving forward. I will be around in case if you need any help.
from aura.auth.
@cxj I agree with you, but I think it is up to the users to modify his / her session.gc_maxlifetime
. If someone in the @auraphp/docs-team can give a green card. I will do. For me it looks not good.
from aura.auth.
Sorry I have not seen this message. I can look into this in the coming days and do a release. Anything I need to take special attention to ?
PS : In case I miss again, please ping me.
from aura.auth.
Nothing special. Just having a tag I can use in my composer.json
file for releases would be very helpful.
from aura.auth.
ok, I will do it tomorrow early morning.
from aura.auth.
Hi @cxj ,
I looked into this, and noticed my comment on #84 (comment) . The default session.gc_maxlifetime => 1440 => 1440
. And the PR #84 already made the change. As it is config for Aura framework, that may not have broken users. But the PR #89 will.
What I would suggest is to override the values passed to Timer
Lines 101 to 106 in 955ef97
For the current time I don't think I can make a release and I believe the patch #84 need to be reverted.
from aura.auth.
I have already changed the values in my copy of Aura.Auth/config/Common.php
to suit my needs. PR #84 and PR #89 were designed to change the default value used by Aura.Auth
to be a sane, intelligent value for all future users of Aura.Auth
.
The default value used by Travis
of 1440, and in the PHP releases of the php.ini
file with session.gc_maxlifetime = 1440
are erroneous. See https://stackoverflow.com/questions/14703363/why-is-the-standard-session-lifetime-24-minutes-1440-seconds/37176824#37176824 for the full explanation.
from aura.auth.
I agree it's up to users how long session.gc_maxlifetime
should be. It's quite annoying now to deal with this low limit. I would really appreciate to see a new release which fixed this issue.
from aura.auth.
from aura.auth.
Well, I didn't want to touch the source, so in case of an update, I do not lose my "fixes". I didn't expect there will be no updates at all for a long time ;).
Anyway, I've tried hard to manage the behaviour of how long the sessions are and how to manipulate the timer. Probably my knowledge is not good enough to get it, or the script itself does not allow to extend the time of being logged in.
@ini_set("session.gc_maxlifetime", 3600*24);
@ini_set("session.cookie_lifetime", 3600*24);
$aura = new \Aura\Auth\Session\Timer(3600*48, 3600*24, 0, 0);
$aura->setIdleTtl(7200);
$aura->setExpireTtl(3600*24);
from aura.auth.
from aura.auth.
@pmjones I have added him to Aura.Auth for now. I don't see a way to add him to the team. Oh and you are fast to reply 👍 .
from aura.auth.
Obviated by having a 4.x branch with the needed changes.
from aura.auth.
Related Issues (20)
- 4.0.0 Release? HOT 2
- PHP 7.4 compatibility HOT 3
- Add ldap bind user HOT 13
- Release and without fear to use HOT 1
- PDO: Thrown exception error messages HOT 6
- Auth object calling session_start HOT 1
- Rehash HOT 2
- Does HtpasswordVerifier need to verify the password hash is buggy and using bcrypt ? HOT 1
- Better ways to handle brute force attack
- Sessions, remember me functionality and other things. HOT 1
- Can't use minimum-stability: stable with this package HOT 2
- Adapter in resume HOT 1
- Probably good to have messages passed for Exceptions ? HOT 3
- LdapAdapter::bind performs a double unbind on the underlying ldap resource HOT 2
- Default timeout values HOT 3
- Missing return values, or changed API and docblock out of date? HOT 4
- Aura.Session compatibility HOT 12
- Unable to logout HOT 1
- If password changes, session is still valid. HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aura.auth.