Force couch_replicator_auth_session plugin to refresh the session periodically.
Normally it is not needed as the session would be refreshed when requests start
failing with a 401 (authentication) or 403 (authorization) errors. In some
cases when anonymous writes are allowed to the database and a VDU function is
used to forbid writes based on the authenticated in username, requests with an
expired session cookie will not fail with a 401 and the session will not be
refreshed. When set, the value should be less than the minimum session timeout
for any of the replication endpoints. For example, for CouchDB, the session
timeout is 600 by default so the value would be set to something like 550.

Issue #1607

[x] Code is written and works correctly;
[x] Changes are covered by tests;
[x] Documentation reflects the changes (comment in default.ini for now, will 
make a separate docs repo commit)


[ Full content available at: https://github.com/apache/couchdb/pull/1619 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to