# \[IGN-4522\] Invalid cookie header - Invalid ‘expires’ attribute warnings in Ignition **URL:** \ **Category:** Ignition\ **Tags:** ignition80\ **Created:** [September 1, 2021, 7:13am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503 "2021-09-01T07:13:14Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![r.p](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@r.p](https://forum.inductiveautomation.com/u/r.p)\ **Post date:** [September 1, 2021, 7:13am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/1 "2021-09-01T07:13:14Z")
Hello, I am using Auth0 as my IDP and everything works however I have continuous warnings in the logs of the type: Invalid cookie header: “Set-Cookie: did\_compat=s%3Av0%3Ac0ec1460-0659-12ec-8e2e-f14ff436a214.MZFsc7cg652%2FD5vf5pcbIv2VyTwjvEsvJXBwhSRXsDY; Max-Age=31557600; Path=/; Expires=Fri, 26 Aug 2022 16:38:30 GMT; HttpOnly; Secure”. Invalid ‘expires’ attribute: apart from the continuous warnings whenever a user authenticates I noticed the session expires very quickly (something like 30 minutes) so each day we need to relogin to the gateway hundreds of times during development. ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [September 25, 2021, 1:25am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/2 "2021-09-25T01:25:11Z")
We’ve logged an internal ticket to address the “Invalid cookie header” warnings. However, I’m not sure if that is related to the session expiring quickly. Which session are you talking about? The one on the Ignition side? Or the one on the IdP side? ---
**Author:** ![r.p](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@r.p](https://forum.inductiveautomation.com/u/r.p)\ **Post date:** [September 27, 2021, 8:01am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/3 "2021-09-27T08:01:43Z")
> [@r.p](#): > > llo, I am using Auth0 as my IDP and everything works however I have continuous warnings in the logs of the type: > > Invalid cookie header: “Set-Cookie: did\_compat=s%3Av0%3Ac0ec1460-0659-12ec-8e2e-f14ff436a214.MZFsc7cg652%2FD5vf5pcbIv2VyTwjvEsvJXBwhSRXsDY; Max-Age=31557600; Path=/; Expires=Fri, 26 Aug 2022 16:38:30 GMT; HttpOnly; Secure”. Invalid ‘expires’ attribute: > > apart from the continuous warnings whenever a user authenticates I noticed the session expires very quickly (something like 30 minutes) so each day we need to relogin to the gateway hundreds of times during development. Hello, I'm talking about the Ignition side authentication which expires no matter what after circa 40 minutes even though we set them to never expire, the Ignition side uses the embedded IA idp of course. ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [September 27, 2021, 2:51pm UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/4 "2021-09-27T14:51:33Z")
Which part of Ignition are you logging into from Auth0? If you are talking about Perspective’s session expiring before Auth0’s session, you could adjust Perspective’s session timeout settings in Designer \> Project \> Properties \> Perspective \> General. Also, do you have the Inactivity Timeout feature enabled in Designer \> Project \> Properties \> Perspective \> Inactivity? That could also kick in and log you out if you have let the session sit idle for whatever amount of time is configured. ---
**Author:** ![r.p](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@r.p](https://forum.inductiveautomation.com/u/r.p)\ **Post date:** [September 27, 2021, 3:09pm UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/5 "2021-09-27T15:09:22Z")
the Auth0 is used for our own projects which correctly never expire, below is their configuration: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/f/6f65414df34fd836e1ae81216c36054ddea0db7b.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/0/c0234a5984d0c6380d8d16365fba02fff4fff78c.png) the problem is with the Inductive Automation Gateway admin GUI which expires after 40 min, even setting the “remember me” option has no effect: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/8/a8d28bee00c2830c071927dd15fa0de191a2bbe6.png) below the gateway admin page I’m talking about: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/d/1/d1ab4d4621f74cab01c7ba32fee9231d9d787f31.png) ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [September 27, 2021, 3:43pm UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/6 "2021-09-27T15:43:39Z")
Ok, there are additional settings for the internal Ignition IdP - see [Configuring Identity Providers - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/Configuring+Identity+Providers#ConfiguringIdentityProviders-IgnitionIdentityProvider) For the Gateway Web Interface’s sessions: there is also a “User Inactivity Timeout” setting in Config \> Security \> General - see [Gateway General Security Settings - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/Gateway+General+Security+Settings) Also: if the “Always ask the IdP to re-authenticate users by default” checkbox is enabled under the “System Identity Provider” setting in the General Security config page, the IdP may force you to re-enter credentials every time you have to log back into the Gateway Web Interface. ---
**Author:** ![r.p](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@r.p](https://forum.inductiveautomation.com/u/r.p)\ **Post date:** [September 27, 2021, 3:56pm UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/7 "2021-09-27T15:56:38Z")
Ok I configured the settings as below: ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/4/1497b8b3f272b7ac76f4e0e2f6bd3860bd90e9f0.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/9/39c1c65290cc1142634386c7d2eb21ea8a8a3352.png) ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/4/446bcd2cf235573e810f8d2c5fd8db7aca7f4fe8.png) I’ll mark as solved if it doesn’t log me out after 40 mins. ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [October 15, 2021, 12:29am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/8 "2021-10-15T00:29:05Z")
Tomorrow’s early access build (15 October 2021) should include a fix for the “Invalid cookie header” issue. For more details, see: [[IGN-4521, IGN-4522] Login "fails" when using Auth0 IDP...but not when you retry - #4 by jspecht](https://forum.inductiveautomation.com/t/ign-4521-ign-4522-login-fails-when-using-auth0-idp-but-not-when-you-retry/46920/4) ---
**Author:** ![r.p](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@r.p](https://forum.inductiveautomation.com/u/r.p)\ **Post date:** [October 15, 2021, 7:06am UTC](https://forum.inductiveautomation.com/t/ign-4522-invalid-cookie-header-invalid-expires-attribute-warnings-in-ignition/50503/9 "2021-10-15T07:06:29Z")
Thank you, I will test the new release and report soon.