Session timeout

Nepolean · September 27, 2024, 9:17am

Hi guys,
Does anyone know how to reduce the session timeout or session expiry?

Note: I edited the MoquiDefaultConf.xml file .

<session-config timeout="60"/>

but it doesn’t work.

girindrag · September 30, 2024, 9:27am

Hi @Nepolean
You can put the below line in this file conf/MoquiProductionConf.xml inside runtime/conf.

Load Data	$ java -jar moqui.war load conf=conf/MoquiProductionConf.xml
Run Server	$ java -jar moqui.war conf=conf/MoquiProductionConf.xml

Note: time in seconds

michael · October 4, 2024, 1:33am

I would put it in your MoquiConf.xml file if it’s based on your application, and not add the h2 stuff like this:

github.com

coarchy/coarchy/blob/1f0d3b79a20b47581ef27e57a85c2b30293d75c9/MoquiConf.xml#L17


      
                  - WARNING: do not deploy in the same Moqui instance (webapp) as applications that need to be
                    PCI compliant or otherwise more secure (generally 15 or 30 minute session timeout)
                  - to avoid logout on browser close:
                    - this will happen with default cookie 'max age' in embedded Jetty (cookie expire of 'Session')
                    - with embedded Jetty (from MoquiStart.java) set the environment variable
                      'webapp_session_cookie_max_age' to something like '1209600' which is 14 days in seconds
                    - for other app servers use the setting for the max age or expire time of the session cookie
              -->
              <webapp name="webroot">
                  <!-- timeout session in 2 weeks without a request -->
                  <session-config timeout="20160"/>
                  <!-- cache static assets for 1 year without a request -->
                  <response-header type="web-resource-inline" name="Cache-Control" value="max-age=31536000, must-revalidate, public"/>
                  <response-header type="screen-resource-text" name="Cache-Control" value="max-age=1209600, must-revalidate, public"/>
              </webapp>
          </webapp-list>
          
          <screen-facade>
              <screen location="component://webroot/screen/webroot.xml" default-subscreen="c">
                  <!-- Public Ecommerce App -->
                  <subscreens-item name="settings" menu-include="false" location="component://coarchy/screen/settings/settings.xml"/>