OAuth: Increase state cookie max age (#27258)
60s can be too short if the oauth provider is slow for some reason and its defintly too slow if the OAuth provider requires 2FA. Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com>
This commit is contained in:
co-authored by
Diana Payton
parent
8ec2aa02c6
commit
8faaa1a520
@@ -646,7 +646,7 @@ This setting is ignored if multiple OAuth providers are configured. Default is `
|
||||
|
||||
### oauth_state_cookie_max_age
|
||||
|
||||
How long the OAuth state cookie lives before being deleted. Default is `60` (seconds)
|
||||
How many seconds the OAuth state cookie lives before being deleted. Default is `600` (seconds)
|
||||
Administrators can increase this if they experience OAuth login state mismatch errors.
|
||||
|
||||
### api_key_max_seconds_to_live
|
||||
|
||||
Reference in New Issue
Block a user