Is there a secret configuration option to allow me to limit how long a user remains signed-in? I would like users to be signed-out automatically after 30 minutes of inactivity. Thanks for any pointers.

Does anyone know if this was ever implemented? I would like the ability to control when a user’s session times out if possible.

I can’t recall if we added the session duration site setting, do you remember @sam ?

Yep, it’s there in admin: [image] The default is quite generous – around two months. I’m not sure if it supports fractional values, though – I can see that some people would prefer very short sessions (five to fifteen minutes), but the setting itself is in hours.

Yeah we have “maximum session age”: User will remain logged in for n hours since last visit Set to 1440 by default

I cannot find anything more up to date on this. The maximum session age can be set to 1 hour as a minimum. This is no use when the computer is being used in a shared environment. Has there been anything on this recently which solves the problem. Essentially I need the user forgotten when the brows…

[image] peteratkins: Essentially I need the user forgotten when the browser is closed That is exactly my patch did, but that was reverted :confused: FEATURE: add setting permanent_session_cookie to configure session stickiness comm…

[image] peteratkins: no use when the computer is being used in a shared environment. Totally non-Discourse question: How does this even happen? Presumably: Each user has a separate UserID for the computer system itself at the OS level Walking away from a work computer requires logging out/…

OK so this is a security threat - I will start a new thread

Luke the whole world does not live in strictly controlled office environments. Take open access sites within an academic institution and machines within libraries etc. Many do not see supplying a browser interface as a security risk. I totally agree that people can configure their hardware and sof…

@Sailsman63 That’s a fair question. Environments which commonly use a shared desktop experience include libraries, schools, and hospitals, though there are others. As you might imagine, driving factors include a focus on ease of use (asking first grade children to remember their username is hard en…

Session Timeout

Community Building Data & reporting

Falco (Falco) September 8, 2020, 3:50am 35

That is exactly my patch did, but that was reverted

You can check the code and port it to a plugin.

Topic		Replies	Views
Discourse members being logged out - how to fix? Support	11	1748	May 25, 2020
Is there a way to set session expiration after a set length of time? Feature	24	7841	December 4, 2025
Session timeout setting implemented for the community discourse application Support	4	207	September 13, 2024
Should "log out" be prominent in the UI? UX	49	15261	August 30, 2015
Discourse deleted 1500 inactive users who haven't been seen for two years after update Support	44	3655	April 24, 2019

Session Timeout

Related topics