Topic on Extension talk:OpenID Connect

There is also new functionality in MediaWiki 1.36 that adds a $wgRememberMe configuration variable. This will allow you to extend login sessions so that your users will not be logged out as frequently. See https://gerrit.wikimedia.org/r/c/mediawiki/core/+/665805

Hi,

I've an installation of Mediawiki 1.35.1 without OpenID Connect and an installation of the same version with OpenID Connect using Keycloak 10 as authentication service.

In the Mediawiki without OpenID Connect I stay logged in for weeks. I'm sure it uses a cookie.

But in the Mediawiki that uses OpenID Connect, I get logged out after session.gc_maxlifetime. It does not seem to use a cookie. Both installations are configured very similar. Is this behavior by design or is there any way to stay logged in with OpenID Connect for a longer time, besides increasing session.gc_maxlifetime?

Thanks

Timo

Unfortunately, this is a known problem. There are some suggestions at Topic:Vq9ay00v0kphuhdd. A potential fix is at https://phabricator.wikimedia.org/T265263, but it requires a core change to MediaWiki.

We had the same Problem with KeyCloak and Wiki Version "1.31.10".

To solve the problem you have to increase the value of the parameter $wgObjectCacheSessionExpiry for example to 8 Hours (28800 seconds). The default value is 3600 seconds.

There is also new functionality in MediaWiki 1.36 that adds a $wgRememberMe configuration variable. This will allow you to extend login sessions so that your users will not be logged out as frequently. See https://gerrit.wikimedia.org/r/c/mediawiki/core/+/665805.