Not sure how much needs to be said here. Sometimes I come back to a tab with a.s open and refresh, then get logged out. I’m using chrome on iOS but this might be reproducible on other browser/platform combinations.
this may be fixed in lemmy’s next major release, which reworks session tokens (and a bunch of other stuff). if it isn’t, I’ll add this to my list of things to fix up after that release comes out. a local Photon install is also in the pipeline, and I believe using that would fix the issue too (since it seems to be rooted in the way the frontend handles authentication tokens)