Confluence Remember Me Cookie: what changed?

[Rainer Pöhlmann]

Dear all,

with the update to a recent Confluence version (6.13.3) I can observe a different lifetime of the "Remember me" cookie (plase keep me logged in). Before, with Confluence 6.6.x lifetime was nearly infinite, now users get kicked-out every once in a while again.

Does anybody know what the default value of this remember me cookie now is? I cannot find this information anywhere...?

And, could it still be adjusted in the following file:

CONFLUENCE-INSTALLATION/confluence/WEB-INF/classes/seraph-config.xml

 using a syntax like

<init-param>
	<param-name>autologin.cookie.age</param-name>
	<param-value>2592000</param-value><!-- 30 days in seconds -->
</init-param>

Any feedback would be appreciated.

Thanks a lot & best regards,

-Rainer

[Rafael Pinto Sperafico · Accepted solution]

Hi @Rainer Pöhlmann ,

Along with Confluence's upgrade, have you changed anything in User Repositories, such as now you are using SSO or something. At the same time, do you have a distinct URL for Confluence that differs from any other application, as the cookie used by Confluence may be overridden. Could you please check from your web browser the cookie's status?

In regards to your inquire - seraph-config.xml - continue on being the place for Remember me, as described in https://confluence.atlassian.com/doc/confluence-cookies-160794071.html

Kind regards;
Rafael

[Rainer Pöhlmann]

Hi @Rafael Pinto Sperafico

thanks a lot for your immediate response.

Nothing changed besides the upgrade itself. Regarding the Cookie we've been always using default settings, no customization there. Also, no SSO involved.

I was simply wondering if anything might have changed since I can now observe a clear difference to the behavior before. But, of course, nothing dramatic, more curiosity on my side ...

I will give "seraph-config.xml" a try.

Best regards,

-Rainer