Feedback-ID: ie3de48e3:Fastmail
Date: Fri, 11 Sep 2026 12:28:32 +0200
From: =?utf-8?Q?=C3=81lvaro?= Herrera <alvherre@kurilemu.de>
To: Noah Misch <noah@leadboat.com>
Cc: pgsql-www@postgresql.org
Subject: Re: wiki login expiration
Message-ID: <aqPVMKEBK-hC0ySO@alvherre.pgsql>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20260909024729.b1@rfd.leadboat.com>
Archived-At: 
 <https://www.postgresql.org/message-id/aqPVMKEBK-hC0ySO%40alvherre.pgsql>
Precedence: bulk

On 2026-Sep-08, Noah Misch wrote:

> Can we make wiki logins persist for substantially longer?  wiki.postgresql.org
> appears to require a new click on the "log in" link every hour or so.  The
> cookie itself has a 30-day expiry, so I gather the server is expiring its side
> of the state faster.  GPT thinks $wgObjectCacheSessionExpiry is the relevant
> mediawiki setting.  Perhaps 30d (86400*30) is a reasonable setting?

I changed this to 7 days; the documentation
https://www.mediawiki.org/wiki/Manual:$wgObjectCacheSessionExpiry
explains that the logout occurs if you're _inactive_ during that period,
so this should be ergonomic enough for most people, I hope.  I'm not
completely sure if the service restart I did is enough for the setting
to take.

One thing that struck me is that our community-auth-initiated sessions
don't apparently have the "keep me logged in" bit set, per the docs for
another related setting [1].  I'm not sure how to set that, but I
suspect that was lost during one of the upgrades.  (The code had to be
rewritten from scratch, and pluggable authentication in mediawiki is
somewhat less than excellently documented, so this isn't really
surprising.)

https://www.mediawiki.org/wiki/Manual:$wgExtendedLoginCookieExpiration

Thanks

-- 
Álvaro Herrera         PostgreSQL Developer  —  https://www.EnterpriseDB.com/
"Ninguna manada de bestias tiene una voz tan horrible como la humana" (Orual)