Include cookie expiration and ttl in the identity example #473
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PR Type
Other/Improve examples
PR Checklist
cargo +nightly fmt
).Overview
I ran into this issue that on some mobile browsers not setting a ttl of the session cookie will actually delete the cookie on session end (some time when the app goes into sleep mode).
I noticed this issue for almost two years now but could never figure out why it was happening. It is very hard to diagnose since it is sporadic and only happens on some browsers (here it was Brave).
I think it's very helpful to include
session_ttl
in the example, I guess many usages of the identity middleware are to enable login flows with some kind of expiration and I just did not know about this at all.This only changes the example of actix-identity, I ran it locally and it works as expected.