Questions tagged [remember-me]

A way to store personal information to make it easier for a user to fill in forms or login to websites at a later time.

A "remember me" option is often used on login forms on websites. It is represented as a checkbox labeled "remember me" and stores either the username or a login token to re-login the user when visiting the website again.

525 questions
15
votes
4 answers

Spring Security Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack

i have a GWT application using Spring Security3.1.2 running in a tomcat 7. i am using UsernamePasswordAuthenticationFilter and PersistentTokenBasedRememberMeServices to persists logins on the DB. moreover, i am using tomcat PersistentManager to save…
Sameeh Harfoush
  • 610
  • 1
  • 8
  • 22
13
votes
3 answers

Persistent cookie timeout with FormsAuthentication

I am creating some "Remember Me" functionality as part of logging in. When I create a persistent cookie during the login process with the following: FormsAuthentication.SetAuthCookie("someusername", true); And my Web.Config looks as…
cda01
  • 1,278
  • 3
  • 14
  • 25
13
votes
10 answers

Remember Me functionality not working in Symfony2

I have implemented remember me functionality in Symfony2. When I log in with remember me box checked, cookie named "REMEMBERME" gets created. That cookie is also available if I close browser and open it after many hours. But when I load home page of…
adityap
  • 729
  • 4
  • 8
  • 19
13
votes
2 answers

How does Remember Me work in Spring Security?

I'm curious how does Remember Me work and how does it work in Spring Security? I understand that server sends long-lived cookies to the client. And then client sends cookie back and server can recognize the client because there's something like…
Roman
  • 64,384
  • 92
  • 238
  • 332
13
votes
2 answers

Change default ASP.NET Identity Two-factor remember Cookie Expire Time

I have been using ASP.NET Identity 2.2.1. Following is the code in post method of VerifyCode action. var result = await SignInManager.TwoFactorSignInAsync(model.Provider, model.Code, isPersistent: model.RememberMe, rememberBrowser:…
13
votes
5 answers

ASP.NET MVC RememberMe

After searching a lot i did not get any answers and finally i had to get back to you. Below i am explaining my problem in detail. It's too long, so please don't quit reading. I have explained my problem in simple language. I have been developing an…
NCCSBIM071
  • 1,207
  • 1
  • 16
  • 30
13
votes
1 answer

Laravel 4 Remember me expire time

I am fairly new to Laravel and had a question regarding the remember me function. I have successfully enabled the "remember me" function by attaching a second argument to the Auth::attempt method like so. if (Auth::attempt(array('email' => $email,…
Kevin Jung
  • 2,973
  • 7
  • 32
  • 35
12
votes
5 answers

Why remember me token?

While implementing the "remember me" feature for a website, why do we complicate things and have a token called remember me token apart from a session token. To the best of my understanding, remember me token can be used to login and create a new…
Ashish
  • 3,028
  • 5
  • 28
  • 35
12
votes
4 answers

PHP "Remember Me" security flaw?

I'm in the middle of coding a 'remember me'-equipped login form, and so far the tutorials I've read (partly to make sure I'm doing it right) all say to store the encrypted password in a cookie along with the username. Then, each time PHP checks if…
Scott
  • 5,338
  • 5
  • 45
  • 70
11
votes
2 answers

How to remember username/password when calling tf.exe?

I use tf.exe command to get the latest codes but it keeps asking for username/password - is there a way to make those credentials remembered? I've looked at the tf.exe argument list but no options allowing to pass-in username/password. What can I…
Nam G VU
  • 33,193
  • 69
  • 233
  • 372
11
votes
4 answers

How can I create a secured "remember me" system using PHP?

I have a login system. How can I implement a secure remember me system using cookies. What value should I have to store in cookie username and password, but how I can secure it?
Saqueib
  • 3,484
  • 3
  • 33
  • 56
11
votes
2 answers

Remember Users & Forgot Password Functionality in Laravel 5.1 and Angular JS (JWT Authentication)

I am using laravel 5 and angular js and JWT authentication for logging and registering my users. But there is nothing mentioned about to facilitate users with remember me functionality and also allow users to reset password when forgotten…
11
votes
6 answers

'Remember-me' authentication feature, does it always mean 'Unsecure' Website?

I'm considering to implement the classic 'remember-me' checkbox on my webapp to allow the authenticated user to be 'remembered' once he returns to visit my website. Gmail, Facebook and others have this kind of feature but I'm not too sure how secure…
mickthompson
  • 5,442
  • 11
  • 47
  • 59
10
votes
4 answers

FOSUserBundle and remember me

I'm using a FOSUserBundle for authentication in Symfony2. Everything works fine except "remember me". My security.yml looks like this: security: providers: fos_userbundle: id: fos_user.user_manager encoders: …
repincln
  • 2,029
  • 5
  • 24
  • 34
10
votes
1 answer

How to make "remember me" work if session expires when browser is closed?

I set sessions to expire when browser closes in main config.yml: framework: session: default_locale: %locale% lifetime: 0 auto_start: true Then I set "remember me" for login page as described in documentation…
Ondrej Slinták
  • 31,386
  • 20
  • 94
  • 126
1
2
3
34 35