IAP has a short timeout

[Geoffrey Arnold]

Hello,

We've enabled IAP on one of our apps. I haven't timed it precisely, but it appears that the login credentials are expiring rather quickly (one the order of an hour or so), requiring us to reauthenticate with IAP. 

This makes it difficult to use IAP with AJAX-y apps because we're constantly requiring our users to reauthenticate (ie. choose which Google Account account to use).

Is this expected?

Best,

Geoff.

[Geoffrey Arnold]

Quick follow-up: it appears the timeout is 1 hour.

For comparison, when using the GAE Users API, the timeout is on the order of days.

[Geoffrey Arnold]

FYI I opened a ticket in the public issue tracker:

https://issuetracker.google.com/issues/38505988