Always Remember User option

[enfJoao]

From a security perspective, this option could be tweaked to "Remember User" with the option to "Automatic", "Optional" and "Disabled".

Automatic would match the current always remember.
Optional the show checkbox for user to tick.
Disabled to never alow the persistent login. Every project that depends on sensitive data access benefits from 2FA, short timed logging and never keeping logins active after closing tabs/browsers.

[sbwalker]

@enfJoao you are referring to an enhancement to the User Settings:

Currently when you set the option to Yes it displays the checkbox on the Login screen and allows the user to make a selection - which is how you described Optional above. I am not sure I understand what Automatic would do.

[enfJoao]

The options that exist are fine.
It's just missing the option to disable the "Remember me".

If a company stores sensitive data, the remember me option is a security risk.