From 9259dd0cce4bf71c0d51894144352d6e35693c94 Mon Sep 17 00:00:00 2001
From: Denis Arh <denis.arh@gmail.com>
Date: Tue, 4 May 2021 19:56:22 +0200
Subject: [PATCH] Make sure we set proper ses. lifetime on external login

---
 auth/handlers/handle_external.go | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/auth/handlers/handle_external.go b/auth/handlers/handle_external.go
index a84a59e8e..a128a7662 100644
--- a/auth/handlers/handle_external.go
+++ b/auth/handlers/handle_external.go
@@ -56,7 +56,16 @@ func (h AuthHandlers) handleSuccessfulExternalAuth(w http.ResponseWriter, r *htt
 	}
 
 	h.handle(func(req *request.AuthReq) error {
-		req.AuthUser = request.NewAuthUser(h.Settings, user, false, 0)
+		req.AuthUser = request.NewAuthUser(
+			h.Settings,
+			user,
+
+			// external logins are never permanent!
+			false,
+
+			// set def. lifetime for this session
+			h.Opt.SessionLifetime,
+		)
 
 		// auto-complete EmailOTP and TOTP when authenticating via external identity provider
 		req.AuthUser.CompleteEmailOTP()