Long lived JWT

[solid junco]

I see here that if I create a JWT it will only live for 15 minutes. https://appwrite.io/docs/references/cloud/client-apple/account#createJWT

My app will be used offline for up to 12 hours and I need to be able to allow the user to still use it even if they can't be online.

My idea would be to have the user sign in and then set a token for a day or two and then once it expires lock them out and force them to sign back in.

I'm definately open to any ideas on how to achieve my goal.

[upbeat ingot]

JWT is useless if you can't connect to Appwrite.

Appwrite's primary session storage is cookies. i think the best approach is to change the session expiration from the default 1 year to 1 day or whatever you want. You can change the session expiration in the auth security settings of your project in the Appwrite Console

[upbeat ingot]

Building an offline first app is a different thing entirely and you can probably find resources online for that

[solid junco]

I saw that you guys set two cookies in my browser when i login. So i logged in and then turned off my wifi and then tried to refresh the page and then the cookies were removed. Is this the same behavior on swift sdk?

[upbeat ingot]

What makes you say they're removed?

[solid junco]

I had the cookies section open on my browser and saw them disappear

Do you want me to send a video?

[upbeat ingot]

What section? What page were you on?

[upbeat ingot]

No it's fine

[solid junco]

ok so i have an internet connection - i refresh the page and see this

i then turn off my wifi and refresh the page and they are gone

[upbeat ingot]

Would you please go to cloud.appwrite.io and check there

[solid junco]

what am i looking for there?

[upbeat ingot]

The cookies

[solid junco]

for me as the user?

[upbeat ingot]

I mean look at the dev tools like this

[solid junco]

Which section of chrome dev tools?

[upbeat ingot]

This place

[upbeat ingot]

That's the cookie right?

[solid junco]

Yes

But when I refresh the page after I turn off wifi they disappear

I can send a short screen recording if needed

[upbeat ingot]

The point is they're still in the browser

[solid junco]

See above for what I’m seeing

[solid junco]

i see that this persists in localstorage during a page refresh while i have no internet

once i turn the wifi back on and refresh the page i am logged back in

is there a way to locally verify that cookie via a public / private key type of deal

my setup is that i want a user to signup / login with oauth2 provider (amazon for example) and then setup a subscription via stripe - at this point they are free to go offline for some set time limt (2 weeks for example) and they should be able to use the app - but after the time limit i will force them to go backonline and reauthenticate or ill call out to appwrite for a refresh token

i plan on adding this https://appwrite.io/docs/tutorials/subscriptions-with-stripe/step-1 to my setup - so i can know if the user is a subscriber

and the offline use of my app pertains to using my ios app and maybe later an android app

[upbeat ingot]

no. we only support validating against the server because the session may be deleted/revoked server side