framework icon indicating copy to clipboard operation
framework copied to clipboard

Add "Remember Me?" checkbox for extended sessions

Open d6y opened this issue 13 years ago • 3 comments

Users have asked for a way to add a "remember me" checkbox to enable/disable the setting of the ext_id cookie. Mailing list thread: http://groups.google.com/group/liftweb/browse_frm/thread/82b931d4bf43d10a/473332fda485d038?lnk=gst

I'd suggest:

  • the ability to add a checkbox with user specified text (e.g., "remember me on this computer?")
  • ability to default the checkbox to checked or not checked
  • if checked, allow ext session code to work as normal. If not checked, do not set the ext session cookie.
    • presumably this impacts both login screens and registration screens.

If there are code changes, I'd be willing to update the wiki page accordingly.

Additionally, in the UK next year, web sites will need to get permission before setting non-essential cookies, which we believe would include the extended session cookie.

Background:

  • Short summary of UK regulation changes: http://www.mablaw.com/2011/07/cookie-law-ico-food-for-thought/
  • Long feedback from the regulator when I asked about "keep me logged in" cookies: http://richard.dallaway.com/jsessionid-and-the-like-plus-the-privacy-and

d6y avatar Sep 02 '11 06:09 d6y

Imported from Assembla: http://www.assembla.com/spaces/liftweb/tickets/1103

github-importer avatar Feb 19 '12 21:02 github-importer

Would this be in the ProtoUserExtendedSession stuff, or elsewhere?

Shadowfiend avatar May 12 '14 02:05 Shadowfiend

Regarding my comment for the EU cookie stuff, I'm fine and don't need any changes.

Regarding the original request from @KenMcDonald, I believe that would be in relation to the ExtendedSessions documentation on the Wiki and is Mapper specific.

Other implementations (such as MongoAuth and MapperAuth) already implement this via isRemember, which might well be enough. Personally, I'm now handling things things more client-side and I don't need changes.

d6y avatar Sep 17 '14 09:09 d6y