Decrease default session timeout

sso
1

Hello,

We’re launching discourse as a docker image where we have possibility to modify app.yml.
Also we’re using SSO feature to log in/out users to discourse forum. And the problem is that existing framework doesn’t allow to trigger user logout from forum when user session is expired in main app. (When user makes logout it’s ok but when user closes browser his forum session is still open ).
That’s why there is a case that it will be good to decrease default session expiration period at least expire discourse user session when he’s inactive 1 hr.

Is it possible to do it using some configuration ?

Generally I’ve read this: Session Timeout discussion however it doesn’t provide an clear answer how to deal with that problem.

2

We had talked about making session timeout duration a site setting but I don’t think we did… @sam would know he worked on this recently.

3

Even if it’s possible to make it using configuration setting it’s fine (just not to change ruby code ). Or is it possible during setup specify (these properties): https://github.com/discourse/discourse/blob/master/config/site_settings.yml
maximum_session_age:
default: 1440
min: 1
max: 175200

Because we’re set it up using docker and I’m not sure whether these props will take affect.