Skip to content

Conversation

@momo3404
Copy link
Collaborator

@momo3404 momo3404 commented Oct 6, 2025

Fixes sessions not timing out after inactivity.

Changes proposed in this PR:

  • Use devise's timeoutable gem to timeout sessions after inactivity.
  • Inactivity counts as anything that is not a request to the app. So scrolling, typing, and mouse movement with no requests all count as inactivity.
  • After the inactivity period has passed, the user will be signed out once they make a request to the app post timeout and will then be redirected to the login page with the flash message "Your session expired, please sign in again to continue".

@momo3404 momo3404 merged commit 0c002c5 into next-release/v5.0.2 Oct 6, 2025
5 checks passed
@momo3404 momo3404 deleted the momo/add-session-timeout branch October 6, 2025 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants