Editorial question142K views1,960 votes1 answer2,005 following
AI-generated"Token has been expired" in Sulu remember-me authentication without built-in credential expiration management
Sulu delegates authentication to Symfony Security through the sulu_user provider and enforces least-privilege access using the sulu_security.role hierarchy and Symfony voters. When a remember-me token exceeds its configured lifetime, Symfony throws an AuthenticationException containing "Token has been expired", which Sulu propagates unchanged. However, core