Conversation
|
I remember I made an issue for this once: |
|
@Monviech thanks for the reference, at the moment I don't want to merge this as it solves part of the problem (and it's not on our roadmap to spend time on this), when automatically logging out , we probably need to make sure we have some visual feedback to the user as well. |
Hadn't seen it due to naming differences, what you are describing there is a subproblem addressed in this PR. I see your conclusion there but the session timeout process is already significantly unreliable, its just that almost no one knows it because the 4 hour default makes it rarely triggered. |
I would appreciate if you could share what is the other part of the problem is. Also, the visible feedback is that they got reloaded to the login screen. That way, they log in and continue what they are working on, in contrast to now that they realize when they eventually hit apply. |
This PR implements automatic logout logic when the session timeout is reached.
Once the session expires, the pages/ tabs automatically reload and redirect the user to the login screen.
After the user logs in in one tab, all tabs log in to the page they were before the logout.
As an unintended consequence, it seems to log out users with much greater consistency than before. https://forum.opnsense.org/index.php?topic=51305.0 (I found that out when I reduced the timeout session)