Problem:

• FreshRss doesn't seem to hang onto the authentication token for very long and requires repeat login with oAuth every day
• Most apps would allow you to specify this or at least set it longer be default
• Setting the expiry time in Authentik to 30d does not affect this
• Setting the expiration time in the FreshRss admin settings to the max value also doesn't change this
• Having to login with my SSO password every since day is not very good UX, no other app requires this

Background:

• I've been using the oAuth with Authentik for quite some time now (I helped clarify the docs on how to do this setup Authentik oAuth setup documentation updates #5969 ). I have several other services that use oAuth. Each of these will remain logged in for days with no issue. (immich, linkwarden, seafile all use oAuth via my Authentik setup and have no problem staying logged in for days, maybe forever)
• Authentik has a setting to change the expiry in the provider screen, and I have set it to "days=30" which has not made any difference
• On the Authentik side, there is really nothing different than any other oAuth provider I have setup. Once logged in it works perfectly, it just requires re-login all the time.
• This happens on my computer when accessing it via browser and also on mobile when accessing through browser

Technical:

• I have freshrss/freshrss:1.23.1 running in docker
• I have persistent volumes for /data and /extensions

Solution:

• I don't think this issue is on the Authentik side, I think FreshRss is not saving the authentication token or has a setting somewhere to delete it after a certain amount of time
• some sort of expiry option in FreshRss or at least setting the default expiry to 30d would be reasonable