fa/breadcrumb-the-shire
1
0
Fork 1
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat(auth): keep remember tokens on session timeout

Browse Source 
- add timeout-specific logout path without remember-token revocation

- reset session timers after remember-me auto login

- compact session policy wording in admin settings (DE/EN)

- extend auth tests for timeout/manual logout behavior
This commit is contained in:
Felix Schneider
2026-03-09 20:47:21 +01:00
parent 792af5a532
commit af8ee10930
8 changed files with 106 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
i18n/default_en.json
View File

@@ -1018,10 +1018,10 @@
"Counters": "Counters",
"User lifecycle policy": "User lifecycle policy",
"Session policy": "Session policy",
"Session limits define how long logged-in users stay signed in.": "Session limits define how long logged-in users stay signed in.",
"Idle timeout signs users out after no activity.": "Idle timeout signs users out after no activity.",
"Session limits define how long logged-in users stay signed in.": "Set idle and absolute limits for active sessions.",
"Idle timeout signs users out after no activity.": "Idle timeout ends inactive sessions; absolute timeout ends long sessions even with activity.",
"Absolute timeout signs users out after total session duration, even with activity.": "Absolute timeout signs users out after total session duration, even with activity.",
"New limits apply on each user's next request.": "New limits apply on each user's next request.",
"New limits apply on each user's next request.": "Changes apply from each user's next request. Remember-me tokens stay active.",
"Session idle timeout (minutes)": "Session idle timeout (minutes)",
"Session absolute timeout (hours)": "Session absolute timeout (hours)",
"Allowed range: 5-1440 minutes (default: 30)": "Allowed range: 5-1440 minutes (default: 30)",
@@ -1218,7 +1218,7 @@
"Top lifecycle reason codes (7d)": "Top lifecycle reason codes (7d)",
"Recent lifecycle risks (7d)": "Recent lifecycle risks (7d)",
"Login progress": "Login progress",
"Your session has expired. Please log in again.": "Your session has expired. Please log in again.",
"Your session has expired. Please log in again.": "Your session timed out. Please sign in again. If you chose Remember me, sign-in can happen automatically.",
"Failed to update role permissions": "Failed to update role permissions",
"Failed to update permission roles": "Failed to update permission roles"
}