Greetings great people on the Internet. I present to you, a question we are dealing with.
Case: The user checks the "Remember Me" checkbox
Question: How long should the session be active? So the user won't need to login.
Standard Symfony puts this on 1 year but we're worried the user will not remember the set password after a year. So should we increase or decrease this value?
We're aware of the security risks and it won't be a default action.
Really looking forward to the answers!