IDLE_Session_Logoff
Issue #395
resolved
It seems the GUI does not have idle timeout session log off enabled. Can you consider implementing?
Comments (2)
-
repo owner -
repo owner - changed status to resolved
It took a while until I've had fixed it, finally it's ready and the fix is introduced to the epoll branch.
There's a new config.php option $config['SESSION_EXPIRY'] which defaults to 3600 sec. After that the session is terminated by php, and thus forcing a re-login.
- Log in to comment
Currently the gui relies on php's session handling, so if php makes a session expired, then the given user has to login again.
However it's possible to add a login timestamp or so, so the gui can check it against the defined 'TTL', and can logout the user (by dropping his session). But the problem is that it has to be consitent with the php session expiry settings.