Option to bind UA instead of only IP in challenge/password cookie

[jeremy5189]

No description provided.

[mhqz]

Hi @jeremy5189, the code looks fine to me.

A possible improvement would be to rename getUserAgentOrIp() that would let us to use the same method for different IDs (IP, User Agent, Private User Token, etc), e.g. getClientID() or getClientIdentifier().

[jeremy5189]

@mhqz Sounds like a good idea, but currently our session id is only valid for 1hr, to do this I guess we must make it same as the TTL of challenge / password cookie?

[mhqz]

@mhqz Sounds like a good idea, but currently our session id is only valid for 1hr,

Oh, I see.

to do this I guess we must make it same as the TTL of challenge / password cookie?

Yeah, that's an option, but if it's too much trouble we could just leave it as it is, no problem.