clean-piano-39737
01/20/2025, 9:26 AMbrief-egg-61061
01/20/2025, 9:26 AMbrief-egg-61061
01/20/2025, 9:26 AMclean-piano-39737
01/20/2025, 9:27 AMbrief-egg-61061
01/20/2025, 9:27 AMbrief-egg-61061
01/20/2025, 9:28 AMclean-piano-39737
01/20/2025, 9:31 AMbrief-egg-61061
01/20/2025, 9:31 AMbrief-egg-61061
01/20/2025, 9:31 AMextendSession
API endpoint. This is done through an HTTP PATCH request to /admin/sessions/{id}/extend
. This method extends the given session ID, but it doesn't change the overall lifespan configuration for a specific identity. [Ory Identities API Reference](https://www.ory.sh/docs/kratos/reference/api) provides more details on this endpoint. 2. Refreshing sessions: There's a mechanism to refresh sessions, which can be used to keep a session active for longer periods. This is typically done through the /self-service/login/browser?refresh=true
endpoint or programmatically using the SDK. [Ory Kratos Session Management Documentation](https://www.ory.sh/docs/kratos/session-management/refresh-extend-sessions) provides more information on session refreshing. It's important to note that these methods don't actually change the configured session lifespan for a specific identity, but rather provide ways to extend or refresh existing sessions. If you need more granular control over session lifespans for specific identities, you might need to implement this logic in your application layer, managing custom session durations on top of Ory Kratos' session management.clean-piano-39737
01/20/2025, 10:37 AMremember_for
and refresh_window
in kratos configuration file?
And what do they do?brief-egg-61061
01/20/2025, 10:37 AMbrief-egg-61061
01/20/2025, 10:37 AMremember_for
and refresh_window
settings in the Kratos configuration file. These particular settings are not mentioned in the Kratos documentation that I have access to. However, I can provide some information about related concepts in Ory Kratos: 1. Session Lifespan: You can set the session lifespan in the Kratos configuration file using the session.lifespan
setting. This determines how long a session remains valid before expiring. For example: yaml session: lifespan: 24h
[Session Management Overview](https://www.ory.sh/docs/kratos/session-management/overview) 2. Refresh Threshold: Kratos has a concept of a refresh threshold, which is configured using session.earliest_possible_extend
. This setting determines how soon before expiration a session can be refreshed. For example: yaml session: earliest_possible_extend: 24h
[Refresh Threshold Documentation](https://www.ory.sh/docs/kratos/session-management/refresh-extend-sessions#refresh-threshold) 3. Privileged Session Max Age: This setting determines how long a session is considered "privileged" for performing certain actions: yaml selfservice: flows: settings: privileged_session_max_age: 15m
[Privileged Sessions Documentation](https://www.ory.sh/docs/kratos/session-management/session-lifespan#privileged-sessions) These settings control various aspects of session management in Kratos, but they don't exactly match the remember_for
and refresh_window
you asked about. If you need specific information about those settings, you might want to check the most recent Kratos documentation or consult with Ory support, as they might be new or specific features not covered in the provided knowledge sources.