The Movie Database Support
Support → Website Support
Cookies not persistent?
posted by PT 100STAFFMOD on March 12, 2017 at 9:59 AM
I've noticed lately that I have to log in again every few days. I can go to the site repeatedly for quite a few days without logging in, but then all of a sudden I have to log in again. Is that intentional, or is it a bug? I have not had this problem with other sites, and it happens irrespective of the browser I'm using, so it's apparently not browser-related. Maybe there's an account setting I need to change to make cookies persistent, but I can't seem to find it. Please advise. Thanks.
Reply by Travis Bell
on March 12, 2017 at 11:55 PM
The auth cookie is set with an expiry of 2 weeks. You can see this by inspecting the cookie, and looking at the expiry date on it. Here's a screenshot for example.
Reply by PT 100
on March 13, 2017 at 4:26 AM
Thanks. The cookie on my computer says: Created: Thursday, February 9, 2017 at 2:13:50 PM Expires: Friday, February 9, 2018 at 2:13:50 PM
So it appears to be set for one year, not two weeks. That's why I'm puzzled. Is it because the auth cookie resides on the server, and I'm seeing only the one on my computer, which serves a different purpose?
Reply by Travis Bell
on March 13, 2017 at 5:47 AM
Nothing I am setting has a 1 year expiry... which specific cookie are you looking at (there are 3 set at the time of login with 1 expiring an hour after you login leaving 2).
access_tokengets an expiry of 14 days (holds you authenticated session)logingets an expiry of 1 hour (only set when you log in, set to validate a new login session)prefsgets an expiry of 6 months (holds things like your language and region)I'd suggest manually removing all cookies for themoviedb.org and loving back in. It should mirror everything I wrote above.
Reply by tmdb57932021
on March 13, 2017 at 6:41 AM
Name: __cfduid
Domain: .tmdb.org
Path: /
Send for: Any kind of connection
Accessible to script: No (HttpOnly)
Created: Sunday, March 12, 2017 at 11:12:04 PM
Expires: Monday, March 12, 2018 at 11:12:04 PM
That's the flash one
Reply by Travis Bell
on March 13, 2017 at 7:18 AM
Oh, that's tmdb.org, and is being set by Cloudflare. I don't set that one. That's just the domain we use for images, it doesn't have anything to do with your session/website.
Reply by PT 100
on March 13, 2017 at 8:39 AM
Okay, thanks. The Cloudflare cookie is the only one that shows up in my Google Chrome browser. I guess I won't worry about the other cookies, except to say that I'm the only user of a desktop computer I use to login, and a longer expiration time between logins would be less hassle. But it's no big deal, especially if you're doing that for security purposes.