[KNOX-136] Knox should support configurable session timeout

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.3.0
• Fix Version/s: 0.3.0
• Component/s: Server
• Assignee: Dilli Arumugam
• Reporter: Dilli Arumugam
• Created: 19/Sep/13 20:28
• Updated: 28/Mar/19 14:12
• Resolved: 24/Sep/13 00:51

Description

There is no clue what is the session timeout in Knox.
When a user authenticates to Knox, a session is created in Knox and a JSESSIONID cookie is returned to the client.
But, there is no clue how long this session is valid.
We should allow customers to set different session timeouts.

At the minimum, we should add

<session-config>
<!-- web.xml expects the session timeout in minutes: -->
<session-timeout>30</session-timeout>
</session-config>

in the web.xml created by deployment.