Allow prompting for agreement each browser session.

I think we must explain that behavior in the config page, and even better I think we should add the option to set 0 days as a valid value like it is now and add a checkbox to enable session cookie that when selected disables the session days input. What do you think?

At least change the description to explain how it works.

Fixed adding it as checkbox.

Thanks, I'll have a look once the GDPR features are finalized. If somebody does an RTBC I could commit it now :)

Also, a port to D7 is welcome :)

@mgifford, why would you say this is related to GDPR?

Hi, I've been told by legal counsel that this is needed for GDPR. Probably the opinion differs from lawyer to lawyer. I am waiting for this though :)

I personally have a hard time agreeing with that. If a visitor to your site gave consent once that you can use their personal data and you offer a way to opt-out that's as easy to use as opting in was, (and you have some mechanism of storing the act of giving consent) you have actually fulfilled the requirements in GDPR.

I can see scenarios where your colleague, friend, or family member borrows your device, visits a site where you've previously consented, and boom, the site would now violate GDPR because somebody who's not consented is visiting, but I think that's stretching it a bit far.

Does anybody have an opinion of how prominent this feature should be in the UI? We now have 3 votes saying it's part of GDPR, so I guess my plan of hiding it way down under Advanced is out of the window? :)

@svenryen I am not personally sure if it is needed for GDPR but I should make that happen (agree every visit) because I was told so as part of the GDPR effort here.

Logically I agree with you @svenryen it really shouldn't be something that is required each browser session. That said some countries and some lawyers may require it it seems.

I have applied the patch, and tested it.

I rephrased the title and description for this option, since I'm not sure whether everybody would understand the meaning of 'Cookie session' as the checkbox label. I also added a reminder to double-check with the legal advisor, since this is a highly annoying feature when enabled. The consent storage mechanism may also be flooded if the site is very busy.

Here's the updated patch for d8. d7 patch to follow.

Here's the patch for 7.x.