LauraXia123 opened a new issue, #11792:
URL: https://github.com/apache/gravitino/issues/11792
### Describe the feature
Absolute Session Duration
**What it does:** Forces logout after 5 hours of total session time,
regardless of activity.
**Why it matters:** Even if a user is actively using the system, their
session cannot last longer than 5 hours. This ensures:
- Regular re-authentication (users must log in again)
- Reduced risk from compromised sessions
- Compliance with security policies requiring periodic re-authentication
**How it works:**
- Timer starts when user logs in
- Timer does NOT reset when user clicks or types
- After exactly 5 hours, user is automatically logged out
- User must log in again with their credentials
**User Experience:**
- No warning is shown (absolute timeout is a hard limit)
- User is logged out and redirected to login page
- User must re-enter their username and password
### Motivation
_No response_
### Describe the solution
_No response_
### Additional context
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
