for now, default to real (non-permanent) session cookies that are cleared at browser close
SESSION_EXPIRE_AT_BROWSER_CLOSE = True later we can maybe have a "remember me" checkbox at login time, so a user can decide on his own whether to use session or long-living cookie.
This commit is contained in:
parent
f6fb8b67bd
commit
182671783d
@ -254,7 +254,7 @@ SESSION_COOKIE_PATH = '/'
|
||||
SESSION_COOKIE_SECURE = False # use True here if you have set WE_HAVE_SSL = True
|
||||
SESSION_COOKIE_HTTPONLY = True
|
||||
SESSION_COOKIE_AGE = 14 * 24 * 3600 # 2 weeks, in seconds
|
||||
SESSION_EXPIRE_AT_BROWSER_CLOSE = False
|
||||
SESSION_EXPIRE_AT_BROWSER_CLOSE = True # more safe than False
|
||||
|
||||
SESSION_SERIALIZER = 'django.contrib.sessions.serializers.JSONSerializer'
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user