Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[RFE] Add ability to configure session idle timeout on Rancher UI #45931

Open
samjustus opened this issue Jun 28, 2024 · 4 comments · Fixed by rancher/rancher-docs#1653
Open

[RFE] Add ability to configure session idle timeout on Rancher UI #45931

samjustus opened this issue Jun 28, 2024 · 4 comments · Fixed by rancher/rancher-docs#1653
Assignees
@alegrey91 @nickwsuse
Labels
area/authentication JIRA To be used in correspondence with the internal ticketing system. kind/enhancement Issues that improve or augment existing functionality priority/2 QA/S team/collie the team that is responsible for auth and rbac within rancher team/ui
Milestone
v2.11.0

Comments

@samjustus
Copy link
Collaborator

Request description:
The user would like the ability to set a timeout in minutes for idle user sessions to the Rancher UI.

Actual behavior:
Rancher has auth-user-session-ttl-minutes to set a max length a UI session (16hrs) can last, where has user is idle for a specific time and come back still session is valid now. i.e., There is no configurable parameter to set the idle session timeout.

Expected behavior:
Need a configurable parameter to auto log off once it hit the idle time out value: i.e., an idle timeout to the user session. So the fact that I didn't touch the Rancher UI for 3 hours should auto log me out (if the inactive timeout session is set correctly).

Additional notes:
The user follows guidelines to access the web apps as per security norms. As per their guidelines, A session idle timeout is required to be implemented before Rancher can run in production.
@samjustus samjustus added the kind/enhancement Issues that improve or augment existing functionality label Jun 28, 2024
@samjustus
Copy link
Collaborator Author

Here are some requirements:

Users to be automatically logged out after a period of inactivity when using the Rancher Manager UI.
The inactivity period will be defined via new setting with name TBC (potentially auth-user-idle-ttl-minutes).
Misconfiguration of auth-user-idle-ttl-minutes (e.g. strings, negative values, etc) must append error entries onto the Rancher Manager logs and disable the feature.
When both auth-user-idle-ttl-minutes and auth-user-session-ttl-minutes are set, the former must always be less than the latter.
This configuration must not apply to CLI or API users using API keys.
A visual warning message to be displayed when the session is about to expire, enabling users to reset the current idle time.

@samjustus samjustus added team/ui team/collie the team that is responsible for auth and rbac within rancher area/authentication priority/2 labels Jun 28, 2024
@samjustus
Copy link
Collaborator Author

https://jira.suse.com/browse/SURE-2982

@samjustus samjustus added the JIRA To be used in correspondence with the internal ticketing system. label Jun 28, 2024
@richard-cox
Copy link
Member

Slightly related, we have an Inactivity feature which will show a modal after a configured amount of time, and if ignored will then enact performance improvements (i.e. disconnect sockets). Ideally the feature in this issue would replace this feature and provide similar 'session expiring' modal / warning.

We would need to work together to understand what constitutes 'idle' (no new api requests, no browser activity, etc)

@samjustus samjustus added this to the v2.10.0 milestone Jul 11, 2024
@alegrey91 alegrey91 self-assigned this Aug 6, 2024
@alegrey91
Copy link
Contributor

@samjustus should this feature needs to be backported to previous versions?

@samjustus samjustus modified the milestones: v2.10.0, v2.11.0 Sep 10, 2024
@richard-cox richard-cox mentioned this issue Nov 8, 2024
Open
This was referenced Feb 12, 2025
Merged
Merged
@alegrey91 alegrey91 mentioned this issue Feb 20, 2025
Merged
@samjustus samjustus mentioned this issue Feb 21, 2025
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@alegrey91 alegrey91

@nickwsuse nickwsuse

Labels
area/authentication JIRA To be used in correspondence with the internal ticketing system. kind/enhancement Issues that improve or augment existing functionality priority/2 QA/S team/collie the team that is responsible for auth and rbac within rancher team/ui
Projects
None yet
Milestone
v2.11.0
Development

Successfully merging a pull request may close this issue.

docs: add auth-user-session-idle-ttl-minutes setting alegrey91/rancher-docs
6 participants
@alegrey91 @richard-cox @Priyashetty17 @samjustus @nickwsuse @joesims22