stay logged in forever

[bburdette]

timeclonk logs us out pretty regularly. I had increased the token timeout, but its still not fixed.

thinking about making a new token every site visit, replacing the old one, and never requiring login after the first time. better than a permanent token. anyway needs fixing.

[bburdette]

solved by pr #36

[bburdette]

Or not!

[bburdette]

In the current scheme a new token is created on page load, and the previous token is expired. But the problem is sometimes the new token doesn't get set in the browser, and the previous token keeps being used. The result is a new login being required.

Tentative solution is to create a new token on page load, and link it to the previous token. When the new token actually gets used by the browser (ie api call), then the previous token will be removed. I'll experiment with this on zknotes before trying it here.