🚀 Feature: unlimited session duration #151

Closed
opened 2025-10-09 16:29:30 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @Felitendo on GitHub.

Feature description

Something that I miss from switching from Authentik is the ability to set the session duration as unlimited. It would be great if I could just type in "0" or "-1" for the session duration and have users logged in "forever"

Originally created by @Felitendo on GitHub. ### Feature description Something that I miss from switching from Authentik is the ability to set the session duration as unlimited. It would be great if I could just type in "0" or "-1" for the session duration and have users logged in "forever"
OVERLORD added the feature label 2025-10-09 16:29:30 +03:00
Author
Owner

@stonith404 commented on GitHub:

This is not recommended for security reasons, especially since the session is stateless, meaning a stolen session token cannot be revoked.

In the future it might make sense if we make the session stateful. Then we could increase the max session duration to maybe 6 months but a longer session expiration is really not recommended.

@stonith404 commented on GitHub: This is not recommended for security reasons, especially since the session is stateless, meaning a stolen session token cannot be revoked. In the future it might make sense if we make the session stateful. Then we could increase the max session duration to maybe 6 months but a longer session expiration is really not recommended.
Author
Owner

@Felitendo commented on GitHub:

I'm talking about this option:

Image

@Felitendo commented on GitHub: I'm talking about this option: ![Image](https://github.com/user-attachments/assets/f3e576a4-0c28-4d67-8942-1335c3498b51)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-2#151