FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login
    1. Home
    2. ctorres
    3. Best
    C
    • Profile
    • Following 0
    • Followers 0
    • Topics 3
    • Posts 8
    • Best 1
    • Controversial 0
    • Groups 0

    Best posts made by ctorres

    • Avoid 'sso' and 'remember-device' cookies persistence after closing browser

      Hi, i'm using FusionAuth 1.36.8 hosted on my own server with hosted login pages for Blazor application.

      I have implemented sign-in and sign-out successfully including the inactivity timeout, but i still have one problem to solve: if the user closes the browser and reopens it, the session will still be there unless the JWT has already expired.

      I have noticed that the fusionauth.sso and fusionauth.remember-device are set as persistent cookies with an expiration in 2090.

      If i manually delete these 2 cookies and close the browser and open it again, the session is gone as i expected and the user is required to authenticate again.

      Is there a way to configure the behavior of these cookies?

      Thanks

      posted in Q&A
      C
      ctorres