Hey there. I have a question about Ory Kratos’ session lifespan. I’m finding infinite sessions because we currently don’t have strict security requirements, and might need long-live sessions due to web app like JupyterLab. Following the comment of this discussion, especially below line, It seems that Ory Kratos can generate unlimited sessions.

If you have security requirements that need to limit the session lifetime, limit the session lifetime 🙂 If you don’t, then don’t.

But I can’t find any references about unlimited(infinite) sessions. Am I misunderstanding that? Or is it undocumented? If I misunderstood, is there any alternative way to achieve that?

Have you tried just removing the lifespan from the session configuration https://www.ory.sh/docs/kratos/reference/configuration

I already removed

session.lifespan

, but it seems that default session lifespan is set to

24h

.