Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remember Me Forgets Me #31415

Open
wezell opened this issue Feb 19, 2025 · 1 comment · May be fixed by #31430
Open

Remember Me Forgets Me #31415

wezell opened this issue Feb 19, 2025 · 1 comment · May be fixed by #31430

Comments

@wezell
Copy link
Contributor

wezell commented Feb 19, 2025

Parent Issue

No response

Problem Statement

This is a huge usability problem for heavy users of the system. As a user, I want to login to dotCMS, click "remember me" and stay logged in. Instead, even with remember me clicked, I get logged out after 30m of inactivity - this happens whether I click remember me or not.

Steps to Reproduce

  1. Login to dotCMS with Remember Me checked
  2. Browse dotCMS backend for a sec
  3. Go to the dev tools, you will see two cookies JSESSIONID and rme. Delete the JSESSIONID cookie but leave the rme - this simulates expiring your session.
  4. Click anywhere in dotCMS and you will be logged out.

Acceptance Criteria

If I click "Remember Me" I want my login to be remembered. I do not want to have to login for the next 2 weeks.

Additionally, we should have a setting in SAML called "extendedLogin" which can be to an int which would add the remember me cookie to the user so they do not have to saml auth every 30m.

dotCMS Version

Not sure when this started but at least 22.x-25.02+

Proposed Objective

User Experience

Proposed Priority

Priority 2 - Important

External Links... Slack Conversations, Support Tickets, Figma Designs, etc.

No response

Assumptions & Initiation Needs

No response

Quality Assurance Notes & Workarounds

No response

Sub-Tasks & Estimates

No response

@wezell wezell changed the title Remember Me Not working Remember Me Forgets Me Feb 19, 2025
wezell added a commit that referenced this issue Feb 19, 2025
…d is encryped in the remember me jwt for greater security. Also, removed the long deprecated CAS login - not even sure it worked.

ref: #31415
Copy link

wezell added a commit that referenced this issue Feb 19, 2025
@wezell wezell moved this from New to In Review in dotCMS - Product Planning Feb 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: In Review
Development

Successfully merging a pull request may close this issue.

1 participant