Simon Willison has announced the release of datasette-auth-github 1.0, a plugin designed to facilitate GitHub authentication for Datasette instances. The primary driver for this version bump was the resolution of a session persistence issue. Previously, the plugin issued authentication cookies without a defined Max-Age parameter. This caused sessions to expire as soon as a browser session ended, a problem that was frequently observed on Mobile Safari. The new update ensures that authenticated sessions remain active for a longer duration by correctly configuring cookie expiration settings.
Authentication Stability for Datasette
Datasette is an open-source tool used for exploring and publishing data, and the datasette-auth-github plugin is a key component for users who need to secure their data behind GitHub’s OAuth system. By reaching the 1.0 milestone, the plugin signals a level of maturity and reliability within the ecosystem. The developer indicated that the software has been tested against both the current stable branch, Datasette 0.65.x, and the development branch, Datasette 1.0ax. This compatibility suggests that the plugin is ready for production use and will remain functional as the core Datasette software moves toward its own major version release.
Missing Details and Future Compatibility
The announcement did not specify the exact duration of the new Max-Age parameter or if this value is configurable by the user. It is also unclear if this update introduces any other security hardening features beyond the cookie fix. While the report mentions that the issue was particularly prevalent on Mobile Safari, the announcement did not detail how the change affects other mobile or desktop browsers. Furthermore, the documentation provided did not state whether there are plans to bring similar session fixes to other authentication plugins within the Datasette suite. Users will need to observe how the plugin performs as Datasette 1.0 moves from alpha to a full release.
This update provides a more consistent login experience for developers and data scientists who access their data on the go. The transition to version 1.0 reflects the plugin’s established role in the Datasette project.
Lead image: Matheus Bertelli / Pexels
