Sessions cookie is Session-only despite Login Lifetime configured — browser restart forces re-login
⚙️Configuration🏬Self-hosted🪲Bugs❓Question✅Solved
Hi, I'm running a self-hosted Zitadel instance (Docker) and I'm having
an issue where the
regardless of Login Lifetime settings.
Setup:
- Self-hosted Zitadel (Docker)
- HTTPS configured
- Login Lifetimes: 720h password, 720h MFA
- OIDC with PKCE (vue-oidc-context + oidc-client-ts)
Problem:
The
the browser is closed and reopened, the session is lost and the user
is forced to re-authenticate completely (password + MFA).
Expected: sessions cookie should persist across browser restarts
matching the configured Login Lifetime (720h).
Actual: sessions cookie is always Session-only regardless of
configuration.
Is there any way to make the sessions cookie persistent? Or is this
a known limitation?
an issue where the
sessionssessions cookie is always set as Session-only, regardless of Login Lifetime settings.
Setup:
- Self-hosted Zitadel (Docker)
- HTTPS configured
- Login Lifetimes: 720h password, 720h MFA
- OIDC with PKCE (vue-oidc-context + oidc-client-ts)
Problem:
The
sessionssessions cookie has no expiration date (Session-only), so when the browser is closed and reopened, the session is lost and the user
is forced to re-authenticate completely (password + MFA).
Expected: sessions cookie should persist across browser restarts
matching the configured Login Lifetime (720h).
Actual: sessions cookie is always Session-only regardless of
configuration.
Is there any way to make the sessions cookie persistent? Or is this
a known limitation?
