Automatic Logouts Are Too Frequent
Summary
Logout is too aggressive
Steps to reproduce
Login to gitlab using github Wait 1 day Access the site again
What is the current bug behavior?
I get logged out!!!!
What is the expected correct behavior?
I don't get logged out. This is a huge hassle in using Gitlab. I am actively working on a project, I am on that site every day. Why does it log me out? Set that security token to 1 month expiry and auto-renew it every time I am on the page.
Possible fixes
Set that security token to 1 month expiry and auto-renew it every time I am on the page.
Boom you've increased usability of the site by 1000%
That's a really simple change. I honestly don't know why it's logging me out at all? Is your usual customer sitting in a library using a public PC? Normally we are on our devices, and they're locked down on their own, there's no need to log anyone out.
Proposal
There may be different reasons for this issue to occur. For this issue, we will focus on adding the "Remember Me" checkbox to the Group SAML sign-in. Due to the existing functionality of SAML on GitLab.com, this means we will still redirect through the SAML flow once every 24 hours.