Decrease default session timeout

Product Support SSO

AI-generated summary

@Volodymyr_Fedak is seeking to decrease the default session timeout for a Discourse forum running as a Docker image with SSO feature. This is necessary to trigger user logout from the forum when the user session expires in the main app, especially when the user closes their browser.

@Volodymyr_Fedak has reviewed a related discussion (session timeout) but did not find a clear solution. @codinghorror mentioned that making session timeout duration a site setting was considered, but it is unclear if it was implemented. @Volodymyr_Fedak would like to know if modifying the maximum_session_age property in the site_settings.yml file during setup will have an effect.

1

Hello,

We’re launching discourse as a docker image where we have possibility to modify app.yml.
Also we’re using SSO feature to log in/out users to discourse forum. And the problem is that existing framework doesn’t allow to trigger user logout from forum when user session is expired in main app. (When user makes logout it’s ok but when user closes browser his forum session is still open ).
That’s why there is a case that it will be good to decrease default session expiration period at least expire discourse user session when he’s inactive 1 hr.

Is it possible to do it using some configuration ?

Generally I’ve read this: Session Timeout discussion however it doesn’t provide an clear answer how to deal with that problem.

2

We had talked about making session timeout duration a site setting but I don’t think we did.. @sam would know he worked on this recently.

3

Even if it’s possible to make it using configuration setting it’s fine (just not to change ruby code ). Or is it possible during setup specify (these properties): discourse/config/site_settings.yml at main · discourse/discourse · GitHub
maximum_session_age:
default: 1440
min: 1
max: 175200

Because we’re set it up using docker and I’m not sure whether these props will take affect.