Profile Image
Ramesh Raghunathan

How To Configure Session Timeout in Basic-Auth

Hello,

In regards to this documentation 

https://docs.ycrash.io/ycrash-server/administration/basic-auth.html, we were able to apply basic auth to our YCrash server by modifying the java command in the launch-yc-server.sh with the appropriate parameters 

-enable-basic-auth --basic-auth-user {YOUR_USER_NAME} --basic-auth-pw {YOUR_PASSWORD} and confirm it's working.

 

However, is there a way to configure that once the user is logged in for a specific period of time, the session expires automatically? For example: 30 minutes. Is there a way to configure this?

 

Thanks!

  • basic-auth

  • session-timeout

  • Configure Session Timeout

Please Sign In or to post your comment or answer

Profile Image

Ram Lakshmanan

Hello Ramesh!

 

 yCrash server runs on tomcat webapp-runner. So any arguments that is supported by the webapp-runner will be supported by yCrash. Looking at the webapp-runner documentation, I see following argument. You can give it a try. You want to configure this argument in the launcy-yc-server.sh.

 

--session-timeout
      The number of minutes of inactivity before a user's session is timed
      out.

Profile Image

Ramesh Raghunathan

Hi Ram,

 

Thank you for the response and info.

 

I tried your suggestion by giving the --session-timeout 5 after --jar <webapp-runner>.  The following is my modified java command in launch-yc-server.sh.

java -Xms2g -Xmx4g -Xss40m -Dapp=yc -DlogDir=. -DuploadDir=. -DdownloadDumps=true -jar webapp-runner-9.0.52.1.jar -AconnectionTimeout=3600000 --session-timeout 5 --enable-basic-auth --basic-auth-user user --basic-auth-pw pass --port 8080 yc.war &

 

Unfortunately, it didn't work. Not sure - has your team come across this use case and/or faced any issues? Will perform some further testing of this use case and get back.

Profile Image

Sandeep Sudheer

Hello Ramesh!

 

We tried and the session timeout parameter doesn't seems to reflect in the application. Will continue to work on a fix and update you at the earliest.

 

Thanks

Got something else on mind? Post Your Question

Not the answer you're looking for? Browse other questions tagged
  • basic-auth

  • session-timeout

  • Configure Session Timeout