1052110 - Increase cookie age to more than 8 hours

Status: RESOLVED WONTFIX

(Mozilla QA Graveyard :: MozTrap, defect)

Description

[Peter Bengtsson [:peterbe]]

By default, Moztrap uses a cookie age of 8 hours. This is very very low. 
Many perfectly secure sites lets cookie live for weeks. 

The motivation for such a low age is usually in case people sign in at a computer that isn't theirs and forget to sign out. However, Persona takes care of this these days by asking that question much more clearly. 

I suggest we change the cookie ago to 3 months. I.e. 90 days. I.e. 7776000 seconds.

Comment 1

[cmtalbert]

Let's go ahead and make this change. I cannot think of any reason a publicly accessible and open to all manual test case repository needs such an aggressive cookie setting. My bugzilla account has a much longer cookie setting and has far more sensitive information in it.

Comment 2

[Peter Bengtsson [:peterbe]]

PR to get it changed by default https://github.com/mozilla/moztrap/pull/70

Comment 3

[Peter Bengtsson [:peterbe]]

I checked with :cturra. Apparently this is NOT overwritten in settings/local.py on prod. So just changing the default will take effect.

Comment 4

[Stephen Donner [:stephend] Not actively reading bugmail]

Mass-closing remaining MozTrap bugs as WONTFIX, due to 1) the Mozilla-hosted instance being decommissioned (see https://wiki.mozilla.org/TestEngineering/Testrail), and, for now, 2) the still-up code archived at its GitHub page: https://github.com/mozilla/moztrap (we'll decide what's next for that, in the near future).

See also the history and more-detailed discussion which led us here, at https://groups.google.com/forum/#!topic/mozilla.dev.quality/Sa75hV8Ywvk

(If you'd like, you should be able to filter these notification emails using at least the unique string of "Sa75hV8Ywvk" in the message body.

Thanks!