Login timeout?
January 19th, 2024, 03:55 PM
#1
Registered User
Thread Starter
Join Date: Oct 2023
Location: Campbell County, VA
Posts: 199
Login timeout?
I'm pretty sure my bank website leaves me logged in longer than classicoldsmobile.com.
I joke.
But is there a setting to stay logged in longer? I use the facebook login if that matters? Most car forums I just hit refresh and I'm still logged in, many hours later.
Just curious, not a complaint. Thanks to those who keep the lights on here btw!
I joke.
But is there a setting to stay logged in longer? I use the facebook login if that matters? Most car forums I just hit refresh and I'm still logged in, many hours later.
Just curious, not a complaint. Thanks to those who keep the lights on here btw!
January 19th, 2024, 07:28 PM
#6
Registered User
Thread Starter
Join Date: Oct 2023
Location: Campbell County, VA
Posts: 199
i switched to user name and password login. let's see if that solves it.
i use fb to coordinate with locals for car related events. also, for some makes/models there are fb groups better than forums.
for my toronado, nothing beats classicoldsmobile.com
i use fb to coordinate with locals for car related events. also, for some makes/models there are fb groups better than forums.
for my toronado, nothing beats classicoldsmobile.com
January 19th, 2024, 08:57 PM
#7
Banned
Join Date: Oct 2012
Posts: 6,267
I just never log out. I close the page. When I open it back up I am always logged in. I have zero to do with fakebook.
Agreed. I just come to Classic Oldsmobile and there I am. I have never been logged out. Not once. Like I said I have zero to do with fakebook. I am using my phone (not an I phone) pretty much 99 percent of the time.
Agreed. I just come to Classic Oldsmobile and there I am. I have never been logged out. Not once. Like I said I have zero to do with fakebook. I am using my phone (not an I phone) pretty much 99 percent of the time.
January 20th, 2024, 05:32 AM
#9
Moderator
Join Date: Jul 2007
Location: Edmond, OK
Posts: 15,916
Interesting. I login with my Droid pretty much every time I browse the site. I'm logged off pretty quickly if I don't stay active (a few hours at most). I'm not sure if it's a setting I selected, or what?
January 20th, 2024, 06:17 AM
#10
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
January 20th, 2024, 06:55 AM
#12
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
There are (many) caveats to SSO (Pass Through) authentication. There existed a time when CO did not integrate FB login. Every CO member required a unique member name & PW. With the implementation of FB login for the CO website, the policies for negotiating a FB login was accomplished by CO administrators & developers FAR up the food-chain. The very basics would have been to (1) accept default FB login policies/parameters; or (2) customized the FB login policies/parameters. In doing so, a CO Administrator &/or Developer established the Session Length and Signed-in Options. Both Session Length & Signed-In Options are left to the discretion of CO. The default normal FB Session Length & Signed-in Option is issuance of a Short-Lived access token (~1 hour) as opposed to a Long-Lived access token (60 days). Again, these policy parameters were selected &/or customized via CO when they installed the FB login API (Advanced Programming Interface). And, yes, a FB login is specific to the type of Browser the end-user utilizes & the h/w device which the end-user utilizes to negotiate the FB login.
January 20th, 2024, 07:09 AM
#13
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
Everyone logs in via the website (LOL) but I know what you're referring to. You login w/ a CO member name/PW. Without getting really ugly (down into the bowels of security authentication) there are a host of CO security policy parameters which can be employed/enabled by a CO Administrator/Developer for anyone. Moderators/Administrators are not provided (in general) the same login security policy parameters as a standard CO member (for obvious reasons). Obviously, I can't speak to those CO policy parameters & it would be far removed from the point of this discussion. In the end, however login policies are highly dependent on CO "role" (mod/admin/member, etc.), Browser & h/w device. There are quite often very select differences between session login policies/parameters based simply upon h/w (PC, mobile, laptop, etc.) & Browser. Sorta/Kinda like the delta between logging onto any website via Internet Explorer, Edge, Mozilla, Safari, Chrome, etc. The actual security policy access token "negotiation" takes place via the Browser which is obviously dependent on the h/w it is loaded onto.
January 20th, 2024, 07:29 AM
#14
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
The delta between a mobile (Wireless) device & a hard-wired PC device (even if the PC is WiFi enabled via a router) is issuance of the IP address (as you I'm sure know). Normally a hard-wired h/w device is issued a static (fixed) IP address (whether that device is a router, modem or PC) and a mobile device is issued a dynamic IP address. This is primarily because of the nature of a mobile device - it is a roaming mobile device which moves between various locations; albeit, it is often provided a new IP address throughout the day as the mobile device changes locations. This is not always the case but it is the general rule. With that said, even a mobile device which doesn't roam is often provided a different (dynamic) IP address throughout the day. Obviously, you can test this by simply turning off the mobile device and turning it back on (there are even simpler ways) - you'll be provided a different IP address. In the grand scheme of things, if the IP address has changed, the security access token is invalid & you'll be logged off any sessions previously employed with the invalid IP address because the bit value has changed losing the access token.
January 20th, 2024, 07:50 AM
#15
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
Last but not least, a word of caution (since it's free anyway). Websites want to make the sign-on/login process as seamless as possible for end-users which gave rise to the SSO (Single Sign On) &/or social sign on interface. However, usage of these sign-on authentication methods is replete w/ security compromises - the least of which is your every jump, move & hurdle is being tracked via that little SSO bit used to negotiate the sign-on/login. It is always to the benefit of any end-user to create a dedicated member/user name & PW for each site & never to allow a SSO authentication method such as Facebook, Google, etc. As an example:
Not exactly the same (as the above example), but in the background your identity is being tracked because that one little bit of information (your login credential authentication) is being tracked (by default) when you login using a SSO method. Today's kiddies (hackers, trackers, spammers, etc.) love this type of information because it's like candy. If they get into a website's ACL (Access Control List) they have keys to the kingdom. The ACL is where all security authentication takes place. If they get that list, say goodbye to most if not all of your login information for all your sites, credit cards, banks, etc., etc., etc.
If you log in to a Google service such as Gmail, you are automatically authenticated to YouTube, AdSense, Google Analytics, and other Google apps.
January 20th, 2024, 02:01 PM
#16
Registered User
Thread Starter
Join Date: Oct 2023
Location: Campbell County, VA
Posts: 199
Very interesting info! I just came back and find that I'm still logged in. Exactly how I want it to work. Lesson learned regarding SSO. I figured it'd be convenient, and it turned out to be the opposite of convenient 
January 20th, 2024, 03:10 PM
#17
Running On Empty
Join Date: Jul 2018
Location: Earth
Posts: 18,059
Most likely inconsequential to most members is the "status" symbol (icon)...located beneath a CO member's name on various threads. Every website handles this status icon differently, some websites don't display any form of status symbol. You may, on various occasions notice the status symbol is green or the status symbol is gray (blanked out, not green). CO policy parameters for this symbol are defined by Administrators/Developers further up the food chain. The symbol contains a TTL (Time To Live) parameter/function.
Example: If you leave your device on with a connection to CO but you have not been active for an extended period of time, the status symbol will change - this is normal behavior. It reflects a CO members status. Green = Active, Grayed Out = Inactive (even though the member is logged in). As soon as you become Active, the symbol will change from Grayed Out>Green. The default TTL is (again) controlled by CO Administrators/Developers further up the food change. Example (again): You have a connection to CO, you go to bed, you open your Browser to CO and your status displays Grayed Out (not Green). As soon as you become Active, the symbol will change to Green.
Example: If you leave your device on with a connection to CO but you have not been active for an extended period of time, the status symbol will change - this is normal behavior. It reflects a CO members status. Green = Active, Grayed Out = Inactive (even though the member is logged in). As soon as you become Active, the symbol will change from Grayed Out>Green. The default TTL is (again) controlled by CO Administrators/Developers further up the food change. Example (again): You have a connection to CO, you go to bed, you open your Browser to CO and your status displays Grayed Out (not Green). As soon as you become Active, the symbol will change to Green.
Thread
Thread Starter
Forum
Replies
Last Post
Zachd
Electrical
13
July 11th, 2023 11:46 AM
