actix / actix/actix-extras

conditionally set visit/login deadlines per login

Offen
#266 1 Kommentar 1 Reaktion 0 zugewiesene Personen Auf GitHub ansehen
A-identity C-feature
Vorherrschende Sprache
Rust
Sterne
889
Forks
224
Ø Merge
9 Std. 37 Min.
Gemergte PRs (30 T.)
20

Beschreibung

It's fairly common for login pages to have a "keep me logged in" option. I'd love a way to do this with `actix_identity`.

Maybe a `Identity::login_with_deadline` function that would overwrite any visit/login deadline set in `IdentityMiddleware`? This seems difficult with the current setup, but maybe fields for per-user deadlines could be added to `Identity`? Then the existing `enabled` flags could be replaced with `Option` which is either a `Copy` of the `Duration` in `IdentityMiddleware` or a custom one, and that's what gets checked to see if a user should be logged out (not sure if that's even possible).

Probably easier would be to provide methods to access the `visit/login_deadline_enabled` fields on a given identity, but to achieve the "keep logged in functionality" you'd basically just have to choose between no deadline and a short auto-logout one (ideally we could keep a default deadline even if users choose to be kept logged in).

Would love to hear what others think!

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.