Introduce Metadata tag to show on address bar the lifetime of session
-
darek334 last edited by darek334
<meta session="lifetime" content="lifetime">
Very important on Authorization flow as OAuth etc, when user login to site for grand Authorization, for short time. This is temporary login only for this purpose and there is set session with cookie etc.
User should be informed very clearly that this session is short in visible place, for example in address bar section.
There is many situation when user do something important like bank operations etc.
Last update of cookie lifetime indicates it is very important. Now setting cookie lifetime to 0, that previous means session lifetime until close browser now means life session until server site store the SID. Closing browser not remove the cookie with session id. -