Extending the Next.js appSession Cookie

Knowledge Articles
,
1

Overview

This article explains why the appSession cookie has a 24-hour or 1-day expiry when session timeouts are configured to 30 days in the Auth0 Dashboard.

Applies To

  • Next.js SDK
  • Session Timeout

Solution

The session timeout settings in the dashboard control the server-side session only, and there is no correlation with the application-level session (appSession cookie). To control the application level session, the application level configuration variables can be used: ConfigParameters | @auth0/nextjs-auth0

For example: to extend the appSession cookie, configure the below within the application level config:

UTH0_SESSION_ROLLING='false'

AUTH0_SESSION_ABSOLUTE_DURATION='2592000' //30 days in seconds