DEV Community

Discussion on: Cross-Domain Firebase Authentication: A Simple Approach

Collapse
 
lingdocs profile image
LingDocs • Edited

This looks really great but I understand that with createSessionCookie() the maximum expiresIn value you can set is two weeks? That means that users would have to sign again every two weeks correct? It's too bad they don't allow for longer cookies.

Perhaps one could do this to extend the cookie, but that would only work if the user is using one of the subdomains more than once every two weeks. 🤔

Collapse
 
brianburton profile image
Brian Burton • Edited

When the user hits /auth/status you can always refresh the token and update the session cookie.