Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

When recovering your account, it seems the deadline duration in this message, `{"id":1060001,"text":"You successfully recovered your account. Please change your password or set up an alternative login method (e.g. social sign in) within the next 2.00 minutes.","type":"success","context":{"privilegedSessionExpiresAt":"2023-07-20T13:13:38.814908982Z"}}` is based on the Privileged session age setting. But I updated the age setting from 2m to 15m, and it is still showing as `2.00 minutes`.

After waiting a bit, it seems to reflect the new duration, so maybe it was a cache invalidation issue or something.

console_ory_sh_says_and_Ory_Console.png

:thinking_face: So I changed the value again, and the recovery flow seems to reflect the change right away.

So maybe I didn’t save it correctly when I was originally testing :shrug:

I did notice the new UI shows this alert, even after I have clicked save.

could have been related to the scheduled maintenance we just had, in some cases config updates were held back for a few minutes