Date: Fri, 11 Sep 2026 11:35:00 -0700
From: Noah Misch <noah@leadboat.com>
To: =?iso-8859-1?Q?=C1lvaro?= Herrera <alvherre@kurilemu.de>
Cc: pgsql-www@postgresql.org
Subject: Re: wiki login expiration
Message-ID: <20260911183500.ec@rfd.leadboat.com>
References: <20260909024729.b1@rfd.leadboat.com>
 <aqPVMKEBK-hC0ySO@alvherre.pgsql>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <aqPVMKEBK-hC0ySO@alvherre.pgsql>
User-Agent: Mutt/2.3.0 (2026-01-25)
Archived-At: 
 <https://www.postgresql.org/message-id/20260911183500.ec%40rfd.leadboat.com>
Precedence: bulk

On Fri, Sep 11, 2026 at 12:28:32PM +0200, Álvaro Herrera wrote:
> On 2026-Sep-08, Noah Misch wrote:
> > Can we make wiki logins persist for substantially longer?  wiki.postgresql.org
> > appears to require a new click on the "log in" link every hour or so.  The
> > cookie itself has a 30-day expiry, so I gather the server is expiring its side
> > of the state faster.  GPT thinks $wgObjectCacheSessionExpiry is the relevant
> > mediawiki setting.  Perhaps 30d (86400*30) is a reasonable setting?
> 
> I changed this to 7 days; the documentation
> https://www.mediawiki.org/wiki/Manual:$wgObjectCacheSessionExpiry
> explains that the logout occurs if you're _inactive_ during that period,
> so this should be ergonomic enough for most people, I hope.  I'm not
> completely sure if the service restart I did is enough for the setting
> to take.

Thanks.  Since your email, I've had the wiki login expire twice more in the
same browser, so I don't think the change has taken effect yet.

I agree logout after 7d inactive is plenty generous.