search

neuvector / neuvector

Apache License 2.0
1.1k stars 204 forks source link

Random auto-logout #786

Open qdealfront opened 1 year ago

qdealfront commented 1 year ago

Environment Platform: RKE2 Kubernetes/Platform Version(s): v1.24.7+rke2r1 and NeuVector v5.1.2

Describe the bug Sometimes you get auto-logged out in the middle of working with NeuVector

Expected behavior I would like to only get auto-logged out after a period of inactivity and not while I'm working. Additionally, it would be great if that period (the allowed amount of inactive minutes ) could be configured in the Settings.

williamlin-suse commented 1 year ago

It's not random. You need to change your session timeout value to a bigger value: top-right icon -> My Profile -> Session Time(seconds)

qdealfront commented 1 year ago

Thanks, I didn't look for this option in 'My Profile'! Nevertheless, I think it would be great if you were only logged out after a period of inactivity, and not after a specific amount of time, because this might interrupt you in the middle of your work. Also, I think making the Session Period a global setting could increase the security as not every employee could set his own time but you could have one (approved) setting for every memeber your company.

williamlin-suse commented 1 year ago

When a user is created, the default session timeout value is 300 (seconds). Every user can set the session timeout value in that user's "My Profile" page. The user is logged out after a period of inactivity. However, some operations invalidate current login session(like changing session timeout in My Profile). When current login session is invalidated, user is logged out automatically.