Question By
Solved
Inactivity sign out
Solved
Is it possible for me to specify a timeout period for users that have been inactive for an extended period of time?
I noticed that when I was logged into my application, I left my machine for over 24 hours, however I was still in the session. This is of course a security concern and would like to address it.
Hey Brian!
Yep, you can change the value of the SESSION_LIFETIME environment variable in your .env file to the value that you want the session lifetime to be.
That way you may specify the number of minutes that you wish the session to be allowed to remain idle before it expires.
If you want them to immediately expire on the browser closing, set the expire_on_close option to true in the config/session.php file.
Hope that this helps!
Best,
Bobby
Report
1
1