Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Set session timeout to 1 day

Alexander Elliott last edited by

Currently, based on information found online, the session expiration is 30 days.
Is there a way to make sessions only last for 1 day?
Reply Quote 0
1 Reply Last reply
Alexander Elliott last edited by

any idea on how to accomplish this?
Reply Quote 0
1 Reply Last reply
Alexander Elliott last edited by

I think I may have found my own solution . https://github.com/NodeBB/NodeBB/issues/5334

DomLennonZA created this issue in NodeBB/NodeBB

closed [Enhancement] Make the express.sid cookie expiry more precise #5334
Reply Quote 1
1 Reply Last reply

3
Posts

810
Views

Log in to reply

Suggested Topics

R

Will this work on TOR highest privacy settings?
General Discussion • • rolsagay

4

0
Votes

4
Posts

892
Views

It should work read-only (disallow javascript and 3rd party cookies prevents everything else). Node.js is just the server-side, it doesn't matter in this regard if the client disables javascript. But since NodeBB relies on javascript for login purposes, it's read-only then.
Z

Can you set the default width to boxed?
General Discussion • • zenkamal

17

0
Votes

17
Posts

3333
Views

Z

@baris Ah...thought I was going crazy for second. Thanks Baris!
JWT - it's kinda like sessions but without the sessions
General Discussion • • Xiph

1

0
Votes

1
Posts

1783
Views

While browsing the 'net, I found a neat little IETF draft standard called JWT (JSON Web Tokens). Basically, the idea is that instead of having sessions on the server and a cookie to match a HTTP request to one of those sessions, one or more claims (i.e. user ID or admin status) are stored in a JSON object which is then signed by the server. (currently through either HMAC, RSA or ECDSA) The client then stores this in usually either localStorage or sessionStorage and sends it along in an HTTP header with any request requiring authorization. For example: client logs in with username "Example" and password "password" server if user and password match, issue a JWT containing the payload { 'userId': 47 } and send it to the client client stores the JWT in sessionStorage (later) client creates a new topic and sends the JWT along in the Authorization HTTP header server validates the signature in the JWT from the Authorization header with their own secret/key and if it's OK, uses the data from the JWT in the processing of the request (in this case, the userID of 47 is used as creator of the topic) Pros of JWT: The server doesn't need to store sessions! => less load on the server & no shared session store is needed when scaling horizontally as long as all instances share a secret or public/private keypair No cookies => no CSRF! Cons: XSS becomes more dangerous - any malicious script with access to the client's localStorage or sessionStorage for a site can fully impersonate the user until the token expires or is deletes There might be more cons & pros, I am neither good nor experienced enough to fully understand everything ("everything" is a lot though, I do have trouble with way less than that anyway, don't take my words for granted, do your own research, etc. etc. you know the drill ) Some links: General introduction: http://angular-tips.com/blog/2014/05/json-web-tokens-introduction/ Slightly more detailed introduction with INFOGRAPHICS(ish): https://auth0.com/blog/2014/01/07/angularjs-authentication-with-cookies-vs-token/ Web-based token decoder: http://jwt.io/ Express middleware: https://www.npmjs.com/package/express-jwt
Advanced settings widgets
General Discussion • • Kalbaskin

2

0
Votes

2
Posts

1040
Views

There is an issue open to add areas, but for now, you have to add them yourself. https://github.com/NodeBB/nodebb-theme-persona/issues/69 If you just want to change some css, you can use the class that is added to the body tag, and add to the custom css section ike so: body.page-recent div[data-widget="theWidgetName"] { color: orange; } kurt-stolle created this issue in NodeBB/nodebb-theme-persona closed No widget areas defined #69
Updated to 1.10.x
General Discussion • • Jenkler

3

1
Votes

3
Posts

350
Views

Started to fix my plugins today Coding takes long time when used to PHP Any way to get plugin info from static:app.load hook ? Like version an stuff

| |

Copyright © 2018 NodeBB | Contributors

1 / 1