[
https://issues.apache.org/jira/browse/COUCHDB-3125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16593338#comment-16593338
]
ASF GitHub Bot commented on COUCHDB-3125:
-----------------------------------------
Github user adrienverge closed the pull request at:
https://github.com/apache/couchdb-couch/pull/194
> Trigger cookie renewal on /_session
> -----------------------------------
>
> Key: COUCHDB-3125
> URL: https://issues.apache.org/jira/browse/COUCHDB-3125
> Project: CouchDB
> Issue Type: Improvement
> Reporter: Adrien Vergé
> Priority: Major
>
> It is currently not possible to programmatically renew an `AuthSession`
> cookie. The only way is to wait 10% of the cookie expiration time then make
> any request to CouchDB, so it sends a new cookie.
> Programmatically getting cookies can be needed, for example, when passwords
> are managed by authentication server. E.g., a third-party auth server gets a
> cookie, forwards it to a user, and the user needs the CouchDB server to
> install a new cookie in his/her browser with a `Set-Cookie` header. (Browsers
> don't allow JS to install cookies, only a `Set-Cookie` header from the server
> can set the cookie.)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
