Is there a secret configuration option to allow me to limit how long a user remains signed-in? I would like users to be signed-out automatically after 30 minutes of inactivity. Thanks for any pointers.

I use a site-wide reverse proxy rule that keeps my users signed in. Before every request (every 3 minutes) we verify if the session still valid. If it isn’t valid anymore (30 mins expire) we remove our cookies and discourse cookies too. Could this approach help?

[image] Falco: I use a site-wide reverse proxy rule that keeps my users signed in. This sounds perfect, but a site-wide reverse proxy rule is over my head. I Googled some resources to learn more. Thank you.

In the model where SSO does the Discourse log-out, how would I disable email notifications to the user and reenable them when they SSO-in again? I want to make sure that people who can’t SSO also can’t get notified of changes on the Discourse site.

What’s the default duration for session timeout in Discourse? I’d also like to request this feature to expose the session duration setting in Discourse Site Settings.

So I’m having some problems with this too :sadpanda:. Would the team be open to a SiteSetting that changes the _t cookie Expires from 20 years to Session?

Nice. We’re having problems where people are sharing PCs on the company and posting on each other account :laughing:.

Perhaps there should be a “Stay signed in” checkbox? [image]

My problem is when using SSO, so I really need to be a site setting. When we detect that the SSO is down we nuke the cookies, but if the user left the pc with a valid SSO session, and other user opens it, he can be logged as someone else. Setting expires to session may solve this.

Guys, I traced down making the _t cookie having a smaller expires. The problem is that Discourse doesn’t seen to handle this very well atm. We get a /login redirect but the it results in a ajax error instead of rendering the /login page properly. Should I add special code to handle this expiration on the $.ajax function?

Session Timeout

Community Building Data & reporting

codinghorror (Jeff Atwood) April 27, 2016, 2:09am 18

I support a site setting for this yes.

Topic		Replies	Views
Discourse members being logged out - how to fix? Product Support	11	1885	May 25, 2020
Is there a way to set session expiration after a set length of time? Feature	23	8056	April 5, 2017
Session timeout setting implemented for the community discourse application Product Support	4	403	September 13, 2024
Should "log out" be prominent in the UI? UX	47	15820	August 30, 2015
Discourse deleted 1500 inactive users who haven't been seen for two years after update Product Support	41	4143	April 24, 2019

Session Timeout

Related topics