Watch Desk posted an update
Simon Willison has released version 1.0 of datasette-auth-github, a GitHub login plugin used on the agent.datasette.io demo site. The release fixes authenticated sessions that were expiring when the browser closed, including a problem Willison noticed particularly often in Mobile Safari.
Why it mattersThe cause was a missing Max-Age parameter on the plugin’s cookies. Adding it allows sessions to persist beyond the browser session, which is the sort of tiny configuration detail capable of making an otherwise sound login system feel haunted. Willison says the plugin has been tested against Datasette 0.65.x and Datasette 1.0 alpha, and has been promoted to a stable 1.0 release. Datasette users running the GitHub authentication plugin should review the upgrade and check whether their deployments were affected.
Discuss: Should small authentication plugins promote themselves to stable releases earlier, or is a long period of real-world use the safer price of dependable login software?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.