keybase / keybase/keybase-issues
Website session timeout is way too long
Open
Nobody has claimed this yet.
- Dominant language
- No language data
- Stars
- 899
- Forks
- 40
- PR merge metrics
- No merged PRs in 30d
Description
I logged into keybase perhaps a week or so ago in my browser. When I returned to keybase.io I was still logged in?! This is not good, someone needs to make it timeout within an hour or less.
Maybe it's just me though, so can someone else please verify this?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the reported session behavior on keybase.io and identify where the website's login session is controlled. Verify the timeout requirement across a returning browser session, and consider the work done when sessions expire within an hour or less with regression coverage.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100