Maybe we should allow to configure the duration of auth token when registering / logging in.
Activity
[-]Auth: "mantenha-me conectado" ao registrar / logar[/-][+]Auth: "keep me connected" when register/login[/+]lucasdupin commentedon Feb 23, 2015
Why not in security.yaml?
We could set expiration by token type:
And it wouldn't be exposed/exploitable from front-end!