-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Session timeout non JS version. #294
base: main
Are you sure you want to change the base?
Conversation
jinnashravan
commented
Dec 10, 2024
- After 20 minutes cookie session timesout and shows a session-ended page.
1. After 20 minutes cookie session timesout and shows a session-ended page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please write a more detailed commit message, including why we're doing this.
Also, have you thought about any way to write tests for this?
|
||
|
||
class SessionEndedForm(forms.Form): | ||
""" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think we need a form here. Just a page with a link should do.
@@ -13,6 +13,21 @@ | |||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you use consistent indentation across the file? I think other templates use 2 characters.
|
||
|
||
{% block content %} | ||
<div class="govuk-grid-row"> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
indentation should be 2 chars
@@ -259,8 +259,8 @@ | |||
CSRF_FAILURE_VIEW = "request_a_govuk_domain.request.views.csrf_failure_view" | |||
SESSION_COOKIE_SECURE = True | |||
|
|||
# Set session (end-user or admin) to expire in 24 hours | |||
SESSION_COOKIE_AGE = 24 * 60 * 60 | |||
# Set session end-user to expire in 20 minutes |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It doesn't apply to admins? Originally the session duration was limited for admins