cisagov / crossfeed

External monitoring for organization assets
https://docs.crossfeed.cyber.dhs.gov
Creative Commons Zero v1.0 Universal
373 stars 54 forks source link

Add 15 minute session timeout #2471

Closed schmelz21 closed 8 months ago

schmelz21 commented 9 months ago

💡 Summary

Prompt the user to stay signed in after 14 and logout after 15 minutes of inactivity.

Motivation and context

As per our security concerns we want web sessions to be set to 15 minutes. After 15 minutes the user will be logged out and sent back to the login screen. A Modal seen in the screen shots shows after 14 minutes and gives a 1 minute countdown.

This issue has been created new, as past efforts were not properly deployed. https://github.com/cisagov/crossfeed/pull/2060 https://github.com/cisagov/crossfeed/pull/2164

Implementation notes

Acceptance criteria

schmelz21 commented 8 months ago

@cduhn17 , @Matthew-Grayson , @aloftus23 - Closing issue as this team confirmed that the functionality is working in DMZ as references to the work is noted in this issue. No code updates were necessary only the completion of user tests.