{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/193","repository_url":"https://api.github.com/repos/IdentityServer/IdentityServer4","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/193/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/193/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/193/events","html_url":"https://github.com/IdentityServer/IdentityServer4/issues/193","id":169649545,"number":193,"title":"Permanent Session - Remember my login - idsrv.session expiration ","user":{"login":"ChristianRiedl","id":2470964,"avatar_url":"https://avatars.githubusercontent.com/u/2470964?v=3","gravatar_id":"","url":"https://api.github.com/users/ChristianRiedl","html_url":"https://github.com/ChristianRiedl","followers_url":"https://api.github.com/users/ChristianRiedl/followers","following_url":"https://api.github.com/users/ChristianRiedl/following{/other_user}","gists_url":"https://api.github.com/users/ChristianRiedl/gists{/gist_id}","starred_url":"https://api.github.com/users/ChristianRiedl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ChristianRiedl/subscriptions","organizations_url":"https://api.github.com/users/ChristianRiedl/orgs","repos_url":"https://api.github.com/users/ChristianRiedl/repos","events_url":"https://api.github.com/users/ChristianRiedl/events{/privacy}","received_events_url":"https://api.github.com/users/ChristianRiedl/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-05T16:49:07Z","updated_at":"2016-08-09T18:16:33Z","closed_at":null,"body":"While in idsrv3 **idrv.session** cookie has an expiration time of approx one month in idsrv4 the cookie expires at the end of the browser session. I guess this is the reason why I am not able to make a permanent session even when \"Remember my login\" is checked. Is there an intention to change it in future versions ?\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/comments/238642245","html_url":"https://github.com/IdentityServer/IdentityServer4/issues/193#issuecomment-238642245","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer4/issues/193","id":238642245,"user":{"login":"ChristianRiedl","id":2470964,"avatar_url":"https://avatars.githubusercontent.com/u/2470964?v=3","gravatar_id":"","url":"https://api.github.com/users/ChristianRiedl","html_url":"https://github.com/ChristianRiedl","followers_url":"https://api.github.com/users/ChristianRiedl/followers","following_url":"https://api.github.com/users/ChristianRiedl/following{/other_user}","gists_url":"https://api.github.com/users/ChristianRiedl/gists{/gist_id}","starred_url":"https://api.github.com/users/ChristianRiedl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ChristianRiedl/subscriptions","organizations_url":"https://api.github.com/users/ChristianRiedl/orgs","repos_url":"https://api.github.com/users/ChristianRiedl/repos","events_url":"https://api.github.com/users/ChristianRiedl/events{/privacy}","received_events_url":"https://api.github.com/users/ChristianRiedl/received_events","type":"User","site_admin":false},"created_at":"2016-08-09T18:16:32Z","updated_at":"2016-08-09T18:16:32Z","body":"Thank you for your answer.\r\nMy application is not very critical regarding security, and so I currently use an idsrv3 based solution using implicit flow and \"Remember my Login\" functionality. Now I started to port to idsrv4 and I am afraid my customers will be unhappy when they have to login whenever they start a browser session. \r\nSo I started to analyze the difference between idsrv3 and idsrv4 login flow of http messages and detected that idsrv4.session cookie has only session lifetime. Than I compared idsrv3 and idsrv4 sources and found that this functionality is not available any more (or not until now) in idsrv4. \"Remember me\" checkbox is ignored. Can you tell me if it is planned to support it in future versions ? If not, can you give me a hint how I can add this functionality ?\r\nOf course I can tinker some cookie storage logic, but I want to do it in an OIDC compliant way.       \r\nI searched in the OpenID connect specs, but got no answer for my problem. \r\n      "}}
{"actor":{"display_login":"ChristianRiedl"}}