Skip to content

Commit

Permalink
Update security.md
Browse files Browse the repository at this point in the history
  • Loading branch information
zhouyanliang authored Jan 4, 2025
1 parent 79e5dcb commit f378a09
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions docs/en-US/handbook/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,6 @@ Usually, we recommend administrators:
- Set a reasonable session validity period, which is longer than the Token validity period but should not be too long, to balance user experience and security. Use the automatic Token refresh mechanism to ensure that active user sessions are not interrupted while reducing the risk of long-term sessions being abused.
- Set a reasonable expired Token refresh limit so that the Token naturally expires when the user is inactive for a long time without issuing a new Token, reducing the risk of abuse of idle user sessions.

![](https://static-docs.nocobase.com/202501031613500.png)

### Token Client Storage

By default, user Tokens are stored in the browser's LocalStorage. After closing the browser page and opening it again, if the Token is still valid, the user does not need to log in again.
Expand Down

0 comments on commit f378a09

Please sign in to comment.