cas 6.1.0 and remember me

[vallee.romain]

Hello cas users .

So i try to use remember check box with cas 6.1.0 .

When i close my browser, and, when i check rememberMe, login form appear .

So i decide to enable debug to "org.apereo.cas.web" 

And when i check the rememberMe checkbox, i got this debug message :

2019-10-18 16:03:08,433 DEBUG [org.apereo.cas.web.support.gen.CookieRetrievingCookieGenerator] - <Request does not indicate a remember-me authentication event. Locating authentication object from the request context...>

Do you know if it's an bug ?

my conf is simple :

cas.ticket.tgt.rememberMe.enabled=true

cas.ticket.tgt.rememberMe.timeToKillInSeconds=2628000

cas.tgc.maxAge=-1

cas.tgc.rememberMeMaxAge=2628000

cas.ticket.tgt.maxTimeToLiveInSeconds=2628000

cas.ticket.tgt.timeToKillInSeconds=7200

Best regards .

Thank you very much

[Ray Bon]

Are you closing your browser after login or starting with a private window?

Remember me works only while the browser is open. When the browser is closed the TGC is removed (tgc.maxAge=-1).

Ray

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.

[vallee.romain]

Thank you very much.
Air de what is the difference between maxAge and HardTimeOut?

[Ray Bon]

maxAge is for the cookie (TGC) and hardTimeout is for the ticket granting ticket (TGT).

TGC by default (I think) lasts for the browser session (=-1).

TGT governs the SSO session and there are a few strategies other than hard timeout, https://apereo.github.io/cas/6.0.x/ticketing/Configuring-Ticket-Expiration-Policy.html

Ray

On Mon, 2019-10-21 at 14:38 -0700, vallee.romain wrote:

Thank you very much.

Air de what is the difference between maxAge and HardTimeOut?

[vallee.romain]

OK, it's seems to be OK.

Thank you very much