FEATURE: Increase default DiscourseConnect session length (#26261)

For some identity providers, 10 minutes isn't much time for a user to complete authentication/registration on the identity provider. Increasing the default to 30 minutes should help in those situations. The nonce is still tied to a single browser session, so there is no material impact on security.
This commit is contained in:
David Taylor 2024-03-20 14:02:12 +00:00 committed by GitHub
parent 16b377bc3f
commit aba0df7cf7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -59,7 +59,7 @@ class DiscourseConnectBase
]
def self.nonce_expiry_time
@nonce_expiry_time ||= 10.minutes
@nonce_expiry_time ||= 30.minutes
end
def self.nonce_expiry_time=(v)