Add support for Mobile/App logins about barong HOT 7 OPEN

Hello @martianatwork any update on this...?

from barong.

I have implemented this and working as expected, waiting for someone from openware to show interest.

from barong.

Hello @martianatwork Can you define me ,how you can validate session from mobile incase of remove the timeout and IP change restrictions.

from barong.

Hey for this we are implementing a sessions section in the frontend where users can see their sessions and have an option to logout from all sessions. Also we have defined a unique user agent for each login on the App so User Agent check is still there, we have also introduced an app_timeout variable which is set to 15 days so the timeout is not removed.

We would have preferred to use a JWT token auth but managing the token state and adding another authoriser will be too much work.

from barong.

@zamananjum0 Any updates on this? We have the same issue.

@martianatwork did you find a workaround?

from barong.

@FernetB you can add authorization headers for that device and also set app_timeout on the condition, either is it a mobile app or browser on the base of user agent check.

from barong.

I would love this, because currently, people are getting logout without any notice. Not sure if it would be possible, but basically after login get some JWT token?

from barong.