Set SESSION_EXPIRE_AT_BROWSER_CLOSE for all OIDC-using IDAs

playbooks/roles/credentials/defaults/main.yml

@@ -52,6 +52,8 @@ CREDENTIALS_LOGOUT_URL: '{{ CREDENTIALS_URL_ROOT }}/logout/'
 CREDENTIALS_OAUTH_URL_ROOT: '{{ EDXAPP_LMS_ROOT_URL | default("http://127.0.0.1:8000") }}/oauth2'
 CREDENTIALS_OIDC_LOGOUT_URL: '{{ EDXAPP_LMS_ROOT_URL | default("http://127.0.0.1:8000") }}/logout'
 
+CREDENTIALS_SESSION_EXPIRE_AT_BROWSER_CLOSE: false
+
 CREDENTIALS_SECRET_KEY: 'SET-ME-TO-A-UNIQUE-LONG-RANDOM-STRING'
 CREDENTIALS_TIME_ZONE: 'UTC'
 CREDENTIALS_LANGUAGE_CODE: 'en_US.UTF-8'
@@ -153,6 +155,8 @@ CREDENTIALS_JWT_AUTH:
       SECRET_KEY: '{{ CREDENTIALS_SOCIAL_AUTH_EDX_OIDC_SECRET }}'
 
 CREDENTIALS_SERVICE_CONFIG:
+  SESSION_EXPIRE_AT_BROWSER_CLOSE: '{{ CREDENTIALS_SESSION_EXPIRE_AT_BROWSER_CLOSE }}'
+
   SECRET_KEY: '{{ CREDENTIALS_SECRET_KEY }}'
   TIME_ZONE: '{{ CREDENTIALS_TIME_ZONE }}'
   LANGUAGE_CODE: '{{ CREDENTIALS_LANGUAGE_CODE }}'

playbooks/roles/discovery/defaults/main.yml

@@ -71,6 +71,7 @@ DISCOVERY_JWT_AUTH:
       ISSUER: '{{ DISCOVERY_JWT_ISSUER }}'
       SECRET_KEY: '{{ DISCOVERY_JWT_SECRET_KEY }}'
 
+DISCOVERY_SESSION_EXPIRE_AT_BROWSER_CLOSE: false
 DISCOVERY_SECRET_KEY: 'Your secret key here'
 DISCOVERY_TIME_ZONE: 'UTC'
 DISCOVERY_LANGUAGE_CODE: 'en-us'
@@ -121,6 +122,8 @@ DISCOVERY_PUBLISHER_FROM_EMAIL: 'None'
 DISCOVERY_EXTRA_APPS: []
 
 DISCOVERY_SERVICE_CONFIG:
+  SESSION_EXPIRE_AT_BROWSER_CLOSE: '{{ DISCOVERY_SESSION_EXPIRE_AT_BROWSER_CLOSE }}'
+
   SECRET_KEY: '{{ DISCOVERY_SECRET_KEY }}'
   TIME_ZONE: '{{ DISCOVERY_TIME_ZONE }}'
   LANGUAGE_CODE: '{{ DISCOVERY_LANGUAGE_CODE }}'

playbooks/roles/ecommerce/defaults/main.yml

@@ -41,6 +41,7 @@ ECOMMERCE_DATABASES:
 ECOMMERCE_VERSION: "master"
 ECOMMERCE_DJANGO_SETTINGS_MODULE: "ecommerce.settings.production"
 
+ECOMMERCE_SESSION_EXPIRE_AT_BROWSER_CLOSE: false
 ECOMMERCE_SECRET_KEY: 'Your secret key here'
 ECOMMERCE_TIME_ZONE: 'UTC'
 ECOMMERCE_LANGUAGE_CODE: 'en-us'
@@ -134,6 +135,8 @@ ECOMMERCE_COURSE_CATALOG_URL: 'http://localhost:8008'
 ECOMMERCE_ENTERPRISE_URL: '{{ ECOMMERCE_LMS_URL_ROOT }}'
 
 ECOMMERCE_SERVICE_CONFIG:
+  SESSION_EXPIRE_AT_BROWSER_CLOSE: '{{ ECOMMERCE_SESSION_EXPIRE_AT_BROWSER_CLOSE }}'
+
   SECRET_KEY: '{{ ECOMMERCE_SECRET_KEY }}'
   TIME_ZONE: '{{ ECOMMERCE_TIME_ZONE }}'
   LANGUAGE_CODE: '{{ ECOMMERCE_LANGUAGE_CODE }}'

playbooks/roles/insights/defaults/main.yml

@@ -78,6 +78,8 @@ INSIGHTS_DATABASES:
 
 INSIGHTS_LMS_COURSE_SHORTCUT_BASE_URL: "URL_FOR_LMS_COURSE_LIST_PAGE"
 
+INSIGHTS_SESSION_EXPIRE_AT_BROWSER_CLOSE: false
+
 #
 # This block of config is dropped into /edx/etc/insights.yml
 # and is read in by analytics_dashboard/settings/production.py
@@ -136,6 +138,7 @@ INSIGHTS_CONFIG:
   SESSION_COOKIE_NAME:  "{{ INSIGHTS_SESSION_COOKIE_NAME | default('insights_sessionid') }}"
   CSRF_COOKIE_NAME: "{{ INSIGHTS_CSRF_COOKIE_NAME | default('insights_csrftoken') }}"
   LANGUAGE_COOKIE_NAME: "{{ INSIGHTS_LANGUAGE_COOKIE_NAME | default('insights_language') }}"
+  SESSION_EXPIRE_AT_BROWSER_CLOSE: "{{ INSIGHTS_SESSION_EXPIRE_AT_BROWSER_CLOSE }}"
   CMS_COURSE_SHORTCUT_BASE_URL: "{{ INSIGHTS_CMS_COURSE_SHORTCUT_BASE_URL }}"
   LEARNER_API_LIST_DOWNLOAD_FIELDS: "{{ INSIGHTS_LEARNER_API_LIST_DOWNLOAD_FIELDS }}"