Anti-GDPR1

controllers/auth.js

@@ -93,6 +93,7 @@ exports.auth = function (aReq, aRes, aNext) {
 
   var authedUser = aReq.session.user;
   var consent = aReq.body.consent;
+  var remember = aReq.body.remember;
   var strategy = aReq.body.auth || aReq.params.strategy;
   var username = aReq.body.username || aReq.session.username ||
     (authedUser ? authedUser.name : null);
@@ -144,6 +145,12 @@ exports.auth = function (aReq, aRes, aNext) {
     aReq.session.username = username;
   }
 
+  // Store remember in the session so we still have it when they
+  // get back from authentication
+  if (!aReq.session.remember) {
+    aReq.session.remember = remember;
+  }
+
   User.findOne({ name: { $regex: new RegExp('^' + username + '$', 'i') } },
     function (aErr, aUser) {
       // WARNING: No error handling at this stage
@@ -283,6 +290,17 @@ exports.callback = function (aReq, aRes, aNext) {
       // Save consent
       aUser.consented = true;
 
+      // Save remember
+      if (aReq.session.remember) {
+        aUser.remember = true;
+
+        // Modify expiry to end of browser session
+        aReq.session.cookie.expires = false;
+        aReq.session.save();
+      } else {
+        aUser.remember = false;
+      }
+
       // Save the session id on the user model
       aUser.sessionId = aReq.sessionID;
 

models/user.js

@@ -32,7 +32,8 @@ var userSchema = new Schema({
     absolute: Number
   },
   flagged: Boolean,
-  sessionIds: [String]
+  sessionIds: [String],
+  remember: Boolean
 });
 
 userSchema.virtual('_since').get(function () {

views/pages/loginPage.html

@@ -42,6 +42,7 @@ <h3>
             </div>
             <div class="input-group-addon">
               <button class="btn btn-info" type="submit" id="action" class="pull-left">Next <i class="fa fa-sign-in fa-fw"></i></button>
+              <span class="small" style="white-space: normal;"><input type="checkbox" name="remember" value="true" title="Check this to remember you currently for the browser session. Use sparingly please."></span>
             </div>
           </div>
         </div>