Maniphest T7390

Maximum cookie lifetime
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	devurandom
	Feb 26 2015, 5:05 PM

Tags

None

Referenced Files

None

Subscribers

Description

Phabricator currently sets some cookies (e.g. PHSID and PHUSR) with a lifetime of 5 years. Information privacy rules in our organisation require us to only use session cookies. I could not find a knob for it – is it possible to enforce this in Phabricator?

Related Objects

Mentioned In: T4806: Give installs more control over session expiry / prompt for reauth before taking security actions

Event Timeline

devurandom created this task.Feb 26 2015, 5:05 PM

devurandom raised the priority of this task from to Needs Triage.

devurandom updated the task description. (Show Details)

devurandom added a subscriber: devurandom.

epriestley closed this task as a duplicate of T4806: Give installs more control over session expiry / prompt for reauth before taking security actions.Feb 26 2015, 5:18 PM

devurandom mentioned this in T4806: Give installs more control over session expiry / prompt for reauth before taking security actions.Feb 26 2015, 5:48 PM

urzds added a subscriber: urzds.Jul 12 2017, 11:11 AM