LauraXia123 opened a new issue, #11630: URL: https://github.com/apache/gravitino/issues/11630
### Describe the feature Goals Terminate a UI session after a configurable idle window and force re-authentication. Warn the user before logout, with an option to remain signed in. Make the idle window deployment-tunable. Behave consistently across multiple browser tabs. Functional requirements Idle detection. Track user activity via mouse movement, key presses, clicks, scroll, and tab visibility changes. Any of these resets the idle timer. Listeners are debounced to avoid excessive resets. Idle window. Configurable. Default 15 minutes. Warning. At a configurable lead time before timeout (default 60 seconds), show a modal that the session is about to end, with a live countdown and two actions: "Stay signed in" (resets the timer) and "Sign out now" (ends the session immediately). No action by the deadline ends the session. Logout. On timeout, clear UI auth state via NextAuth signOut and redirect to the login route. The login screen indicates the session ended due to inactivity. Cross-tab consistency. Activity in any tab keeps all tabs alive. Timeout or logout in one tab logs out all tabs. Coordinate via BroadcastChannel with a storage-event fallback. Refresh independence. Silent token refresh must not count as activity. Only genuine user interaction resets the idle timer, otherwise background refresh would defeat the timeout. ### Motivation _No response_ ### Describe the solution _No response_ ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
