Conditional lifetime of the trust device cookie

[sdespont]

Hello,

I would like to use different lifetimes for trusted device cookies for the user or administrator.

In a custom trusted device manager, would it be possible to set different lifetimes based on custom conditions?

# config/packages/scheb_2fa.yaml
scheb_two_factor:
    trusted_device:
        manager: acme.custom_trusted_device_manager  # Use a custom trusted device manager

[scheb]

Yes, this is possible, but then you need to write the cookie logic yourself. The standard implementation is built for a single configured cookie lifetime.

The standard implementation that comes with the bundle can be found in these three files:
https://github.com/scheb/2fa/blob/7.x/src/trusted-device/Security/TwoFactor/Trusted/TrustedDeviceManager.php
https://github.com/scheb/2fa/blob/7.x/src/trusted-device/Security/TwoFactor/Trusted/TrustedDeviceTokenStorage.php
https://github.com/scheb/2fa/blob/7.x/src/trusted-device/Security/TwoFactor/Trusted/TrustedCookieResponseListener.php