agora inbox for pgsql-www@postgresql.org  

help / color / mirror / Atom feed

From: Álvaro Herrera <alvherre@kurilemu.de>
To: Noah Misch <noah@leadboat.com>
Cc: pgsql-www@postgresql.org
Subject: Re: wiki login expiration
Date: Fri, 11 Sep 2026 12:28:32 +0200
Message-ID: <aqPVMKEBK-hC0ySO@alvherre.pgsql> (raw)
In-Reply-To: <20260909024729.b1@rfd.leadboat.com>

On 2026-Sep-08, Noah Misch wrote:

> Can we make wiki logins persist for substantially longer?  wiki.postgresql.org
> appears to require a new click on the "log in" link every hour or so.  The
> cookie itself has a 30-day expiry, so I gather the server is expiring its side
> of the state faster.  GPT thinks $wgObjectCacheSessionExpiry is the relevant
> mediawiki setting.  Perhaps 30d (86400*30) is a reasonable setting?

I changed this to 7 days; the documentation
https://www.mediawiki.org/wiki/Manual:$wgObjectCacheSessionExpiry
explains that the logout occurs if you're _inactive_ during that period,
so this should be ergonomic enough for most people, I hope.  I'm not
completely sure if the service restart I did is enough for the setting
to take.

One thing that struck me is that our community-auth-initiated sessions
don't apparently have the "keep me logged in" bit set, per the docs for
another related setting [1].  I'm not sure how to set that, but I
suspect that was lost during one of the upgrades.  (The code had to be
rewritten from scratch, and pluggable authentication in mediawiki is
somewhat less than excellently documented, so this isn't really
surprising.)

https://www.mediawiki.org/wiki/Manual:$wgExtendedLoginCookieExpiration

Thanks

-- 
Álvaro Herrera         PostgreSQL Developer  —  https://www.EnterpriseDB.com/
"Ninguna manada de bestias tiene una voz tan horrible como la humana" (Orual)

view thread (7+ messages)  latest in thread

Message-ID: <aqPVMKEBK-hC0ySO@alvherre.pgsql>
Permalink:  ../aqPVMKEBK-hC0ySO@alvherre.pgsql/
Also on:    postgresql.org/message-id/aqPVMKEBK-hC0ySO@alvherre.pgsql

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-www@postgresql.org
  Cc: alvherre@kurilemu.de, noah@leadboat.com
  Subject: Re: wiki login expiration
  In-Reply-To: <aqPVMKEBK-hC0ySO@alvherre.pgsql>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox