Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

staleSessionInactivityTimeout and staleSessionForceLogout not working #19

Open
jdcast opened this issue Jan 26, 2017 · 1 comment
Open

Comments

@jdcast
Copy link

jdcast commented Jan 26, 2017

I currently have the following flags set in my app's .json file. Even with staleSessionInactivityTimeout set to ~30 days and staleSessionForceLogout set to false, I notice that about every couple of days I am automatically logged out. What's the logic behind that?

Note I am using Chrome 54.0.2840.100 (64-bit) with default cache settings. I also have multiple AWS instances running different versions of my app (all sharing the same user db). So switching between instances is seamless since I only have to login once.

Note: I do notice that after switching between instances that under Chrome at Chrome -> Settings -> Advanced Settings -> Content Settings -> Cookies -> All cookies and site data -> <my_app> -> Local Storage changes upon every instance switch. Maybe that's related (e.g. session cookie)?

"public" : {
"env" : "prd",
"staleSessionInactivityTimeout" : 2628000000,
"staleSessionHeartbeatInterval" : 180000,
"staleSessionPurgeInterval" : 60000,
"staleSessionActivityEvents" : "mousemove click keydown",
"staleSessionForceLogout" : false
}

Thanks!

@jdcast jdcast changed the title staleSessionInactivityTimeout and staleSessionForceLogout not working staleSessionInactivityTimeout and staleSessionForceLogout not working Jan 26, 2017
@lindleycb
Copy link
Owner

Hi, without some means of reproducing this it's hard to tell. I guess that you're aware that having multiple instances sharing the same database means that client inactivity in any one of the instances could result in the user being logged off all instances (and perhaps that's what you want). Are you sure it's meteor-stale-session that's doing the logging out and not Accounts.config e.g. via the loginExpirationInDays option? (http://docs.meteor.com/api/accounts-multi.html#AccountsCommon-config) If you uninstall stale-session does it still log you out before 90 days are up? I realise you probably already tried some of this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants