The remember option sets a cookie which keeps the user logged in after the session ends / browser is closed.
If this option is empty, the login will be only valid for the session. When the users close the browser and reopen it then they won’t be logged in.
Hi @Teodor. Thanks for the quick response. Yes, I thought so, but above I show that in practice this is not the case. As shown in my screenshots, my “remember” field is empty and the application still generates a token and remembers the user when visiting the application again, even if the session was completed.
Are you sure a cookie is actually created? Can you expand the panel to see the value in “Expires” column? If remember is empty it will say Session, which means this expires when the session ends …
The .sid cookie is a session cookie and not the authentication cookie from the remember me option. The session cookie only lives short, depending on your settings about 30 minutes while the remember me cookie will remember the user for multiple days.
Thanks @Teodor and @patrick. Yes, indeed, in the “Expiration / Max age” field there is a Session value. I will run additional tests with more situations and waiting times. Perhaps the situation arises in cases when the user closes the application and opens it after 10-15 minutes and turns out to be logged in, since the cookie lifetime has not expired yet. If so, is it possible to make a logout happen immediately after the application is closed (tab is closed / the browser is closed)?
Logged in and then checked the relevance of cookies at the following time intervals after closing the browser tab:
a) 30 minutes after closing browser tab;
b) 2 hours after closing browser tab;
c) 8 hours after closing browser tab;
d) 36 hours after closing browser tab;
In the Workflows/Server Actions tab open the Server Connect Settings. There you can configure the Sessions settings, you can set it to Redis and set the Session TTL in seconds (300 is 5 minutes).