Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Experimental feature to automatically expire inactive sessions #4022

Merged
merged 8 commits into from
Feb 13, 2025

Conversation

sandhose
Copy link
Member

@sandhose sandhose commented Feb 12, 2025

Fixes #1875

This adds an experimental feature which allows expiring sessions that are inactive for a certain amount of time.

It runs as a scheduled task every 15 minutes, checking for the 'last activity' on each session type.
It processes sessions by batches of 100 at a time, to avoid overloading Synapse when syncing back the database.

It expires:

  • all user (browser) sessions
  • all compatibility sessions
  • oauth sessions which are:
    • for a user
    • using a 'dynamic' client (so the sessions started from clients defined in the config are excluded)

Copy link

cloudflare-workers-and-pages bot commented Feb 12, 2025

Deploying matrix-authentication-service-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7bfb1a1
Status: ✅  Deploy successful!
Preview URL: https://479de4f5.matrix-authentication-service-docs.pages.dev
Branch Preview URL: https://quenting-session-timeout.matrix-authentication-service-docs.pages.dev

View logs

@sandhose sandhose added A-Device-Management Related to sessions and device management T-Enhancement New feature of request labels Feb 12, 2025
@sandhose sandhose merged commit f2ef058 into main Feb 13, 2025
30 checks passed
@sandhose sandhose deleted the quenting/session-timeout branch February 13, 2025 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-Device-Management Related to sessions and device management T-Enhancement New feature of request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Make it possible to automatically log out inactive sessions after some time
1 participant