Agent-Hellboy / Agent-Hellboy/mcp-runtime
Remember dashboard users for 30 days after login
- 主要语言
- Go
- 星标
- 6
- 派生
- 1
- 平均合并
- 11 小时 33 分钟
- 30 天内合并 PR
- 13
描述
## Problem
The dashboard UI currently appears to require users to log in again instead of remembering the authenticated browser session for a longer period. This is inconvenient for normal dashboard usage where a trusted browser should stay signed in across restarts and short breaks.
## Desired behavior
After a successful dashboard login, remember the user in the browser for 30 days so they do not need to re-enter credentials/API key on every visit.
## Scope
- Dashboard UI service
- Browser-side persistence/cache for the authenticated session or login token
- Any matching API/session behavior needed to support the 30-day lifetime safely
## Acceptance criteria
- A successful login persists enough auth state for the dashboard to restore the user for up to 30 days.
- Persistence survives page refresh and browser restart.
- Expired or invalid credentials are detected and the user is sent back to login.
- Logout clears the persisted browser state immediately.
- The implementation avoids storing raw secrets unnecessarily; prefer a scoped/session token if available.
- Add or update tests for login restore, expiration, and logout clearing behavior.
## Notes
Use browser storage/cookies deliberately. If the dashboard currently stores an API key directly, consider whether a server-issued session token or explicit expiry metadata is safer for this 30-day remember-me behavior.
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。