owncloud/core — pull request #31 by visit1985 (2012-10-14 21:07:39+00:00)
Title: reresubmit: improved persistent cookies :)

After some review rounds with @scroogie I decided to put this into a merge request again.

I used @bartv2's draft and implemented all our comments (from [pull request #26](https://github.com/owncloud/core/pull/26)).

Here a short summary of the new features:
* multiple tokens from multiple hosts/browsers can be stored at the same time
* recreate token after each stressful authentication
* delete tokens on password change
* delete tokens older than 15 days (configurable)
* show a message to the user if cookie authentication fails [pull request #30](https://github.com/owncloud/core/pull/30)
* use OC_Util::generate_random_bytes() for token generation
* php session timeout after 1 hour (not configurable jet - I know)
* php session id regeneration after 15 minutes

Please review and comment!