-
Type:
Suggestion
-
Resolution: Fixed
-
Component/s: None
-
None
OpenID has remember me support:
This is done using checkid_immediate indirect authentication requests:
http://openid.net/specs/openid-authentication-2_0.html#anchor28
Basically, this is how it would work:
- When a user logs into Studio via Google, their OpenID is set in a persistent cookie on Studio.
- When that user returns to Studio, either after closing their browser or after their Crowd token had expired, Studio checks for that cookie.
- If the cookie exists, the user is redirected to Google with the mode set to checkid_immediate. This tells Google not to supply the user with an authentication screen if they aren't logged in, rather, it will send them back to Studio with a unsuccessful response.
- If unsuccessful, Studio clears the persistent cookie, and the user is not logged in.
The effect of the above is that if a user has clicked remember me on Google and has logged into Studio before on the browser, they will be automatically logged into Studio when they return after session expiry.
- is duplicated by
-
CLOUD-3811 As a user logged into Google Apps, I would like to access Studio without clicking 'Log in again'
- Closed
-
CLOUD-4328 As a google apps user, I want to remain logged into JIRA as long as I am logged in into google apps.
- Closed
- relates to
-
CLOUD-2318 Frequent timeouts in Google Apps-integrated Studios due to no "Remember me" cookie
-
- Closed
-