Is there a secret configuration option to allow me to limit how long a user remains signed-in? I would like users to be signed-out automatically after 30 minutes of inactivity. Thanks for any pointers.

Does anyone know if this was ever implemented? I would like the ability to control when a user’s session times out if possible.

I can’t recall if we added the session duration site setting, do you remember @sam ?

Yep, it’s there in admin: [image] The default is quite generous – around two months. I’m not sure if it supports fractional values, though – I can see that some people would prefer very short sessions (five to fifteen minutes), but the setting itself is in hours.

Yeah we have “maximum session age”: User will remain logged in for n hours since last visit Set to 1440 by default

I cannot find anything more up to date on this. The maximum session age can be set to 1 hour as a minimum. This is no use when the computer is being used in a shared environment. Has there been anything on this recently which solves the problem. Essentially I need the user forgotten when the brows…

[图片] peteratkins: Essentially I need the user forgotten when the browser is closed That is exactly my patch did, but that was reverted :confused: FEATURE: add setting permanent_session_cookie to configure session stickiness committ…

[图片] peteratkins: no use when the computer is being used in a shared environment. Totally non-Discourse question: How does this even happen? Presumably: Each user has a separate UserID for the computer system itself at the OS level Walking away from a work computer requires logging out/loc…

OK so this is a security threat - I will start a new thread

Luke the whole world does not live in strictly controlled office environments. Take open access sites within an academic institution and machines within libraries etc. Many do not see supplying a browser interface as a security risk. I totally agree that people can configure their hardware and sof…

@Sailsman63 That’s a fair question. Environments which commonly use a shared desktop experience include libraries, schools, and hospitals, though there are others. As you might imagine, driving factors include a focus on ease of use (asking first grade children to remember their username is hard en…

会话超时

社区数据与报告

Falco (Falco) 2020 年9 月 8 日 03:50 35

这正是我的补丁所做的，但它被回退了

你可以查看代码并将其移植到一个插件中。

话题		回复	浏览量
Discourse members being logged out - how to fix? Support	11	1748	2020 年5 月 25 日
Is there a way to set session expiration after a set length of time? Feature	24	7841	2025 年12 月 4 日
Session timeout setting implemented for the community discourse application Support	4	207	2024 年9 月 13 日
Should "log out" be prominent in the UI? UX	49	15261	2015 年8 月 30 日
Discourse deleted 1500 inactive users who haven't been seen for two years after update Support	44	3655	2019 年4 月 24 日

会话超时

相关话题