Session Time Out - Githubissues

As a Team Lead,
I want users to receive an alert when their session is about to time out,
so that they can extend their session or save their work before it expires.

Context / Background

Users need to get alert when their session is about to time out. Give users the option to extend their session if they are about to be logged out. Question for dev: can we have different configuration on timeout for users and HOUS staff? If so, do that require additional dev efforts?

UX/UI Links

[Insert UI Mockup Here]

Business Rules

[ ] Session Timeout: The user session will time out after a specific period of inactivity (e.g., 15 or 30 minutes).
[ ] Alert: An alert must appear X minutes (e.g., 2 minutes) before the session times out, informing the user of the pending timeout.
[ ] Options in the Alert:
- [ ] Extend Session: The user can click a button to extend the session.
- [ ] Allow Expiration: If the user takes no action, the session will automatically time out, and they will be logged out.
[ ] Inactive State: If the session times out, the user will be redirected to the login page with a message stating the session has expired.
[ ] Session Timer Reset: Clicking the "Extend Session" button resets the inactivity timer and keeps the user logged in.
[ ] Accessibility: The pop-up alert must be accessible to screen readers and fully keyboard-navigable.
[ ] This timeout will apply to users authenticated with BCSC/BCeID and IDIR.

Story Scenarios

Scenario 1: User receives an alert warning before session timeout

Given the user has been inactive for X minutes,
When the session is about to expire (e.g., 2 minutes before timeout),
Then an alert appears informing the user their session will time out unless they take action.

Scenario 2: User extends the session

Given the session is about to expire and the alert has been displayed,
When the user clicks "Extend Session",
Then the session timer is reset and the user remains logged in.

Scenario 3: Session expires due to inactivity

Given the session is about to expire and the alert has been displayed,
When the user takes no action or close the alert,
Then the session times out, the user is logged out, and they are redirected to the login page with a session expiration message.

Accessibility Scenarios

Screen Reader Support: The pop-up alert must announce its appearance and give clear instructions to users using screen readers.
Keyboard Navigation: Users must be able to navigate the pop-up alert and click the buttons (e.g., "Extend Session") using only the keyboard.

bcgov / entity

Session Time Out #23274