{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1836","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1836/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1836/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1836/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1836","id":104975176,"number":1836,"title":"Refreshing identity token without redirecting the browser?","user":{"login":"Luno89","id":3233858,"avatar_url":"https://avatars.githubusercontent.com/u/3233858?v=3","gravatar_id":"","url":"https://api.github.com/users/Luno89","html_url":"https://github.com/Luno89","followers_url":"https://api.github.com/users/Luno89/followers","following_url":"https://api.github.com/users/Luno89/following{/other_user}","gists_url":"https://api.github.com/users/Luno89/gists{/gist_id}","starred_url":"https://api.github.com/users/Luno89/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Luno89/subscriptions","organizations_url":"https://api.github.com/users/Luno89/orgs","repos_url":"https://api.github.com/users/Luno89/repos","events_url":"https://api.github.com/users/Luno89/events{/privacy}","received_events_url":"https://api.github.com/users/Luno89/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-09-04T21:45:15Z","updated_at":"2015-09-08T12:43:08Z","closed_at":null,"body":"I have been told that we need a way for a user to click a button on our pages to keep themselves logged in. Redirecting the user away from their page is apparently not a possibility.... Some of the forms we have are long and while talking to customers on the phone may take longer than our timeout period. So when the user goes to submit their form their input is lost. \r\n\r\nThis seems like it might be a similar issue to the one in <a href='https://github.com/IdentityServer/IdentityServer3/issues/666'>issue 666</a> ( i really hope you guys made that issue that number on purpose :)) \r\n\r\nI know its stupid but the only thing i can come up with is opening a new window via javascript, redirecting that window session to our web app, coping the '.AspNet.Cookies' cookie into local storage of the browser, and then coping that into the main session.\r\n\r\nThe only other way may be to take the input no matter what, do the authentication in code, and submit the input based on the credentials of the resulting login?\r\n\r\n I dont really know what im talking about or if that will work or not but if you have any ideas that would be awesome. Or just tell me im stupid for trying and i will take it my boss :) \r\n\r\nThanks for all your guys' great work. We have been using IdentityServer for about a year now and plan on going live with it in a fews months. I hope to be able to start contributing at some point :)\r\n\r\nThanks for your time."},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/138548537","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1836#issuecomment-138548537","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1836","id":138548537,"user":{"login":"Luno89","id":3233858,"avatar_url":"https://avatars.githubusercontent.com/u/3233858?v=3","gravatar_id":"","url":"https://api.github.com/users/Luno89","html_url":"https://github.com/Luno89","followers_url":"https://api.github.com/users/Luno89/followers","following_url":"https://api.github.com/users/Luno89/following{/other_user}","gists_url":"https://api.github.com/users/Luno89/gists{/gist_id}","starred_url":"https://api.github.com/users/Luno89/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Luno89/subscriptions","organizations_url":"https://api.github.com/users/Luno89/orgs","repos_url":"https://api.github.com/users/Luno89/repos","events_url":"https://api.github.com/users/Luno89/events{/privacy}","received_events_url":"https://api.github.com/users/Luno89/received_events","type":"User","site_admin":false},"created_at":"2015-09-08T12:43:08Z","updated_at":"2015-09-08T12:43:08Z","body":"So how would that work? The same origin policy prevents cross domain cookies.. right?  Would one use the postMessage function in javascript? Do you know of a demo? ill probably try messing with it today... im googling around.. Thanks again"}}