How logging in works:
User inputs username and password
Solibri sends these to the server
Server responds with an access token
Solibri takes the access token, uses it to actually start and such.
If “remember me” was chosen, access token is kept on disk
So, Solibri never remembers the username and password, and we don’t really want to remember those.
Now, access token is kept on disk and is used on subsequent starts if it is still valid. It should stay valid for 30 days. After that Solibri notices that it is no longer valid and requires username and password to get a fresh token.
Why 30 days? The length is totally arbitrary, but 30 days is quite common default in many web services. It could be a year. Maybe 30 days is such that still after 30 days you would remember the password without writing it down, after a year you might not. And 30 days is still long enough that you don’t need to input it too often.
Why is it sometimes shorter than 30 days? The access token is kept on disk and if you remove your C:\Users\user.name\.solibri folder, it is gone. One other way to retrigger the password prompt is to tick of “remember me” in Solibri settings. There are other cases when services usually invalidate existing access tokens. One in particular is password change. You can try this in email or social media services, changing your password via desktop browser most likely logs you out in your mobile devices. So with Solibri too it might happen that sometimes the access token isn’t valid for the whole duration.
As for the specific case where someone has had to input their password and username too early, it is difficult to say why without exact dates and times.
Addition:
Like browsers do it, by remembering credentials when access token has expired. I don’t think anything really prevents us from making Solibri remember the username and password and automatically putting them to the fields. But if we had that, we would need to have a way of clearing them easily, and as the browser used in the login screen is not a full browser, there is no way to go to settings and clear them.
I think personally I would prefer keeping the access token refreshed continuously so the login screen wouldn’t ever popup if you didn’t log out intentionally.
