Is there a secret configuration option to allow me to limit how long a user remains signed-in? I would like users to be signed-out automatically after 30 minutes of inactivity. Thanks for any pointers.

Does anyone know if this was ever implemented? I would like the ability to control when a user’s session times out if possible.

I can’t recall if we added the session duration site setting, do you remember @sam ?

Yep, it’s there in admin: [image] The default is quite generous – around two months. I’m not sure if it supports fractional values, though – I can see that some people would prefer very short sessions (five to fifteen minutes), but the setting itself is in hours.

Yeah we have “maximum session age”: User will remain logged in for n hours since last visit Set to 1440 by default

I cannot find anything more up to date on this. The maximum session age can be set to 1 hour as a minimum. This is no use when the computer is being used in a shared environment. Has there been anything on this recently which solves the problem. Essentially I need the user forgotten when the brows…

[image] peteratkins: Essentially I need the user forgotten when the browser is closed That is exactly my patch did, but that was reverted :confused: FEATURE: add setting permanent_session_cookie to configure session stickiness comm…

[image] peteratkins: no use when the computer is being used in a shared environment. Totally non-Discourse question: How does this even happen? Presumably: Each user has a separate UserID for the computer system itself at the OS level Walking away from a work computer requires logging out/…

OK so this is a security threat - I will start a new thread

Luke the whole world does not live in strictly controlled office environments. Take open access sites within an academic institution and machines within libraries etc. Many do not see supplying a browser interface as a security risk. I totally agree that people can configure their hardware and sof…

@Sailsman63 That’s a fair question. Environments which commonly use a shared desktop experience include libraries, schools, and hospitals, though there are others. As you might imagine, driving factors include a focus on ease of use (asking first grade children to remember their username is hard en…

Timeout de session

Communauté Données et rapports

Falco (Falco) Septembre 8, 2020, 3:50 35

C’est exactement ce que mon correctif faisait, mais il a été rétabli

Vous pouvez examiner le code et l’adapter dans un plugin.

Sujet		Réponses	Vues
Discourse members being logged out - how to fix? Support	11	1748	Mai 25, 2020
Is there a way to set session expiration after a set length of time? Feature	24	7841	Décembre 4, 2025
Session timeout setting implemented for the community discourse application Support	4	207	Septembre 13, 2024
Should "log out" be prominent in the UI? UX	49	15261	Août 30, 2015
Discourse deleted 1500 inactive users who haven't been seen for two years after update Support	44	3655	Avril 24, 2019

Timeout de session

Sujets connexes