Details
-
Fix
-
Status: Open (View Workflow)
-
Minor
-
Resolution: Unresolved
-
None
-
None
-
None
Description
Current behaviour
- HTTP sessions are closed when idle for some time.
New behaviour
- HTTP sessions are closed after a fixed time.
- This conforms to the OWASP recommendation.
JS7 clients handle session timeouts automatically and re-login when required.