The-OAG-Development-Project / Application-Gateway

OWASP Application Gateway is an HTTP proxy that handles Oauth2 authentication and session management
https://owasp.org/www-project-application-gateway/
Apache License 2.0
83 stars 4 forks source link

Session Renewal #20

Closed gianlucafrei closed 3 years ago

gianlucafrei commented 3 years ago

Nelly does not offer any kind of rolling session timeouts. To achieve a very similar user experience we should add a renewIfLessThan configuration value in the Nelly configuration under sessionBehaviour. If nelly gets a token that has a remaining time of less that the value nelly should issue a new session token.