BrowserID system does not keep me logged in

[Jeff Marshall]

The BrowserID system on Postorius logs me out all the time, even after just a few page views. I'm constantly having to hit the sign-in button again. If I am trying to perform an administrative function I have to do it very quickly after signing in or else I'm logged out again.

There's no error when I get logged out. It simply loses my logged-in state.

Creating a superuser account via the command line and logging in that way works flawlessly without any unexpected logouts. The problem is isolated to BrowserID login only.

Mac OS X: 10.7.3
Chrome: 19.0.1084.46 (all default settings on the browser)

[Terri (terriko)]

Has anyone been able to duplicate this?

I had ~15 people doing interface testing and dev at GHC12 and no one mentioned running into this bug to me, so perhaps something has changed that solved this issue. Jeff, can you try it again on the latest code?

[Terri (terriko)]

I finally managed to duplicate this: the cookies were getting set to 3 minutes long for some reason. This definitely made it seem like I was getting logged out all the time on my machine.

I'm going to make a change that makes us ignore the timeout from persona (i.e. I'm setting SOCIAL_AUTH_SESSION_EXPIRATION = False in postorius_standalone's settings.py) but that now gives me cookies that last several weeks. That's fine for now and solves the problem for me, but we may eventually wish to re-evaluate the session timeout length.