matrix-org / matrix-org/thirdroom
Increase Refresh Token / Access Token Lifetime
Open
Nobody has claimed this yet.
bug
Identity / Auth
- Dominant language
- C
- Stars
- 647
- Forks
- 70
- PR merge metrics
- No merged PRs in 30d
Description
We should increase the refresh token and access token lifetime such that the average user isn't signed out between sessions. Unless they are away for a while without accessing Third Room, they should stay signed in.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Start by locating the refresh-token and access-token configuration and the authentication flow, then establish acceptable lifetimes from project guidance. Done means average users remain signed in between sessions while extended inactivity still requires signing in again.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100