FR: Support login with API Token

[dorianim]

Hey there,

I'm using openid connect for my authentication. It works, but the token expires after a few days. This is very inconvenient, because I have to log in to the app over and over again.

It would be nice if it was possible to use an API-Token for authentication, since you can set a custom expiry date.

[Benimautner]

As with issues #54 & #45, this is because the jwt token expires. There is a simple yet temporary fix: you have to increase the expiration time of your web tokens in the API configuration. See: https://vikunja.io/docs/config-options/#jwtttl.

This, however, also changes how long you stay logged in on the web and might introduce security concerns (i.e. you stay logged in for a year and forget to log out on a public computer)

As for your question, yes it would be possible, but not ideal, since that's not what API tokens are for.

[Benimautner]

After consulting with @kolaente I've expanded the app token refresh in the upcoming release to the level of the frontend. Every time you start the app and automatically every 12 hours the token should be refreshed, so it should never expire. I haven't extensively tried it myself but the refreshing on app launch definitely works, so please do let me know whether you still experience this with 0.1.4-beta.