[Feature Request] Remember me

[sn00pster]

A remember me checkbox on the login would be nice to save logging in every time and take you directly to the dashboard.

[ottnorml]

@sn00pster Thanks for your request.
I am missing this feature too after using UI For Docker before, which did not have any authentication.

[jamshid]

Portainer is great but why do I have to login each time I open a new tab? I'm trying to use direct links like this (makes it very easy for non-docker users to work with a container):
http://docker.example.com:9000/#/containers/myproject_mycontainer_1/console
But this requires login every time, claiming "Your session has expired".

I verified my docker (Ubuntu16) and browser are using the correct time. Even restarted the portainer container. So I don't think it's related to #398.

How can I diagnose the problem, which cookie contains authentication (JWT?) and why isn't it a browser-wide, long-lived cookie?

[ncresswell]

Hi there, For security reasons, we use session tokens, which are tied to a browser session (tab). If you want the token available across tabs, we would need to switch to cookies, which in our view, adds security risk. Unless there is sufficient demand, we will remain using session tokens. Happy for feedback from the wider user base. N Rgds, Neil Cresswell On 25/03/2017, at 9:40 AM, jamshid <notifications@github.com<mailto:notifications@github.com>> wrote: Portainer is great but why do I have to login each time I open a new tab? I'm trying to use direct links like this (makes it very easy for non-docker users to work with a container): http://docker.example.com:9000/#/containers/myproject_mycontainer_1/console<https://urldefense.proofpoint.com/v2/url?u=http-3A__docker.example.com-3A9000_-23_containers_myproject-5Fmycontainer-5F1_console&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=BsQeIPpVXfZX_ra17p9cuohV16IfAbVfUDgnBHlIT-A&s=RsEIvHF9q2Vh1xtFIPdHAubXPucTxozZG0pBO4t8xQs&e=> But this requires login every time, claiming "Your session has expired". I verified my docker (Ubuntu16) and browser are using the correct time. Even restarted the portainer container. So I don't think it's related to #398<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_portainer_portainer_issues_398&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=BsQeIPpVXfZX_ra17p9cuohV16IfAbVfUDgnBHlIT-A&s=Gg-mC3pAWjlhtTlTxbM1ytZFPyvsHfS7v0Y0dIANG0I&e=>. How can I diagnose the problem, which cookie contains authentication (JWT?) and why isn't it a browser-wide, long-lived cookie? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_portainer_portainer_issues_613-23issuecomment-2D289137430&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=BsQeIPpVXfZX_ra17p9cuohV16IfAbVfUDgnBHlIT-A&s=LYJEgTR2HH16U5VmDz1e77N_F4M11pQrz1pTTwYBsoc&e=>, or mute the thread<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AWGrlV2oWR3ib3pCaFvEmUJUrxWw-5FAcuks5rpCpPgaJpZM4MFeL2&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=BsQeIPpVXfZX_ra17p9cuohV16IfAbVfUDgnBHlIT-A&s=5qer27NabkhZ_UUPl_cvbQ0tkI-QpWMZG4Clx0Pdno4&e=>.

[jamshid]

Okay, but imo that's extremely unfriendly UX. People like working with multiple tabs open and hate having to re-login. Even non-technical users use right-click Open Link in New Tab.

Instead consider making it an HttpOnly or "secure" cookie and require https. Running portainer over http is a much more serious security issue than cross-tab cookies.

Thanks for keeping this open, maybe more users will +1 and you'll reconsider.

[pscl4rke]

Yes, opening up new tabs for different pages is great for compare-and-contrast activities, and is such a major part of my workflows that I'm currently stuck using an older version of Portainer. I know Portainer's UI is based on a single-page design, but I'm hoping this gets fixed soon so I can start following the mainline again.

[ncresswell]

I agree "remember me" is a great feature/option Rgds, Neil Cresswell On 4/04/2017, at 11:47 PM, P. S. Clarke <notifications@github.com<mailto:notifications@github.com>> wrote: Yes, opening up new tabs for different pages is great for compare-and-contrast activities, and is such a major part of my workflows that I'm currently stuck using an older version of Portainer. I know Portainer's UI is based on a single-page design, but I'm hoping this gets fixed soon so I can start following the mainline again. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_portainer_portainer_issues_613-23issuecomment-2D291475958&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=XqUTZEMEFE_ca_T87yTyEvlNEO2KUzgFCYCPuD4fXgI&s=EOQ0BphhibsJccGgYEY-WSDgQgygZVd36fo4Ok4bVD4&e=>, or mute the thread<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AWGrlaDnO0y35YR12hWDsWzLSJ3DTd36ks5rsi3lgaJpZM4MFeL2&d=DQMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=0fx0h4vB56iTLpw2McH1ZD6TqG_QGpbggVOB-PfMJpM&m=XqUTZEMEFE_ca_T87yTyEvlNEO2KUzgFCYCPuD4fXgI&s=euDXxdzxki7BqBGWywMFPFCA5FcEhXM63B5Z_Ly98QI&e=>.

[akanix42]

@ncresswell why are cookies required? Can't you store the token in localStorage instead of sessionStorage?
As it stands this is extremely detrimental to my experience. For example, I need to have the logs in one window and the console connection in another window. I need to also have the freedom of opening other windows to look at other containers.

[deviantony]

@nathantreid Token was originally stored in the sessionStorage because we prefered to have our users re-login when opening a new tab.

Now, with the more recent feedback about the usage of Portainer, it seems that a lot of people actually want to use multi-tabs (which I think is because of a UX problem with Portainer but that's another discussion), so we can switch the storage from sessionStorage to localStorage.

Note that I'll open another issue for that, as it's not related to the remember-me feature request asked in this issue.

Edit: done, tracked in #910

[mrdrogdrog]

I think this could easily be solved by saving the Token in either the SessionStorage or the LocalStorage. Depending on whether remember me is on or off.

[ghost]

Until this is implemented, users will have the ability to set a longer session timeout of 8hrs via #3846

[ismaail]

Setting Session lifetime to 1 year in Settings > Authentication doesn't solve the issue.

[CrazyWolf13]

Any updates on this?
Doesn't seem like it's already fixed.
I'd love to see something like remember me, every applications has it just not Portainer....