Session
After signing in, why does the page stay signed in after refresh?
After signing in, why does the page stay signed in after refresh?
After sign-in, the server starts keeping state for this person.
The server creates a session at sign-in: After credentials pass, the server creates a session state for this person and gives the browser an identifier.
Every request carries the identifier: Later requests automatically carry it; the server recognizes this is the same person.
It fails after expiry or clearing: When the session expires or the identifier is cleared, the server no longer recognizes it and the page asks for sign-in.
Users are asked to sign in again every half hour. Check the session lifetime setting and state its current value; if it is too short, adjust it to a reasonable duration and confirm an hour of continuous use stays signed in.