Increase access token duration to 1 day #3850
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
We currently have an issue in web which causes a hard page load / redirect to the personal space view after token expiry / during token refresh. Fixing the issue in web is quite some work as it involves a lot of loose ends (see linked ticket). In order to mitigate this annoying behaviour I'd like to increase the access token duration to 1 day.
Do we need a changelog item for this?
Is 10 minutes a conscious decision / reasonable value? Or do we want to have e.g. 30 or 60 minutes when we fixed the issue in web and can revert to a smaller value again here?
Related Issue
Motivation and Context
Mitigate an annoying redirect during token refresh.
Types of changes
Checklist: