Planned Inactivity Session Timeout

Discussion in 'Feature Requests' started by NNN, Jul 13, 2020.

  1. NNN

    NNN New Member

    Joined:
    Nov 4, 2016
    Messages:
    3
    Likes Received:
    0
    Hi,

    A recent pen test brought up the lack of inactivity session timeout in Liquidfiles. I understand from previous requests that this may be difficult to implement due to the architecture used.

    Would it be possible to implement an inactivity session timeout in a manner like this?...
    Heartbeat polling runs the in background keeping the session alive and user remaining logged in. If an upload is running then you already know that on the page so can pass through that information as part of the heartbeat so that a session timeout is never reached. Once the heart beats no longer include that a file upload is in progress then the time since last activity should be used to calculate if the inactivity session timer has been reached. If it has then the page should be redirected to the logout page and the session ended.

    Thanks.
     
  2. Johan

    Johan Administrator
    Staff Member

    Joined:
    Dec 1, 2015
    Messages:
    38
    Likes Received:
    1
    Session Timeout will be added in LiquidFiles v3.5.
     

Share This Page