Replies: 2 comments 1 reply
-
|
I think in the meanwhile I figured out a difference: notice the remember_me cookie and also the difference in KEYCLOAK_IDENTITY - which has valid expiration date, while it is "session" in case on passkey. Anybody has an idea why remember me doesn't work with passkey and how to extend the lifetime of IDENTITY cookie? |
Beta Was this translation helpful? Give feedback.
-
|
Looks like the is issue opened on December #45104 |
Beta Was this translation helpful? Give feedback.
-
|
many thanks for the reference. After some testing I can confirm my login using MFA and "remember me" remains active.. the issue is related to passkeys - "remember me" doesn't exist/apply to passkey session. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
after upgrade to KC 26.4.7 I have extended my existing setup with passkeys support. It works well and I can login into my 2 different Nextcloud instances using OIDC and "Sign in with Passkey" option. But I have the problem such session times out quickly (few hours, maybe after client suspend) and the user must login again.
If I login using user+password and MFA (TOTP, webauthn) the session remains logged in for long time (I set session timeout to 22d in realm settings and clients have no individual settings).
a session started today expires on Feb 17 which makes me think "remember me" doesn't work for Passkey sessions for some reason (I see it's tiked in "LOGIN" event)
I'm not sure how to troubleshoot the problem - is it something wrong in my settings, does the system ignore my "remember me" checkbox. Any ideas welcome.
Beta Was this translation helpful? Give feedback.
All reactions