Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

We’re implementing authentication with users on both mobile and web platforms. We need mobile sessions to be long (persistent log in on their personal device) and web sessions to be short. Are there any mechanism to support this?

I was wondering the same thing for our mobile app. There is an older discussion on GitHub about it, but without any resolution:

<https://github.com/ory/kratos/discussions/1995>

One thing which was discussed in another topic (<https://github.com/ory/kratos/discussions/3118>) was that you could have a cronjob which just extends all mobile sessions daily or so.

<@U04TWTLRCET> see conversation on this thread to same question in the <#C02MR4DEEGH|ory-network> channel:  <https://ory-community.slack.com/archives/C02MR4DEEGH/p1680044662183539>