mirrors/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-25 16:42:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Invalidate sessions created with remember me when remember me is disabled for realm

Browse Source 
Closes #43328

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
This commit is contained in:
Giuseppe Graziano
2025-10-14 17:00:41 +02:00
committed by GitHub
parent 38909da47d
commit bda0e2a67c
6 changed files with 60 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/documentation/server_admin/topics/login-settings/remember-me.adoc
View File

@@ -16,3 +16,5 @@ When you save this setting, a `remember me` checkbox displays on the realm's log
.Remember Me
image:images/remember-me.png[Remember Me]
WARNING: Note that disabling the "Remember me" option will invalidate all sessions created with the "Remember me" checkbox selected during login, requiring users to log in again. Any refresh tokens related to these sessions will also become invalid.
Note also that the sessions will not be invalidated immediately when the switch is disabled, but only when a cookie or token associated with an invalid session is used. This means that disabling and then re-enabling the "Remember me" switch cannot be used to invalidate old sessions.