'''Short description'''

Sometimes, if I do use a guest system to login to one wiki, it would be nice if I could control the cookie lifetime of this session on this machine. For that case, I would prefer a checkbox or pull down menu of some lifetimes listed in the login form. e.g. 15min,  2h, 4h, 10h, 1 week, always.

That would be something like the dead man switch described at [[MoinMoinPatch/SecurityString]]  -- ReimarBauer <<DateTime(2006-04-22T08:02:25Z)>>

{{attachment:cookie_lifetime.png}}

Two patches are necessary:

{{attachment:userform.py.patch}}

{{attachment:login.py.patch}}

The login patch stuff needs to be done differently. The point is that the real login (creation of a valid user object if the user has filled in username and password into the form fields) is done by the auth methods - before login action is even called. Therefore, the login action must not create a user object on its own. There might also be cases where cookies are not needed and not used, e.g. with http auth - it must not set a cookie in such a case. I didn't try yet, but I think the only way is to modify auth.py and not login.py.

Further changes may be necessary to Preferences. Because the remember_me configuration switch is using this patch redundant. The wiki configuriation value of cookie lifetime is redundant too.

----
CategoryFeatureRequest