Closed Bug 849483 Opened 12 years ago Closed 12 years ago

No session timeout in bugzilla.mozilla.org

Categories

(bugzilla.mozilla.org :: General, defect)

Production
defect
Not set
normal

Tracking

()

RESOLVED INVALID

People

(Reporter: satishb3, Unassigned)

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.155 Safari/537.22 Steps to reproduce: Bugzilla.mozilla.org does not expire the user’s session even after 24 hours of inactivity. Steps to reproduce: 1. Log into the website https://bugzilla.mozilla.org 2. Leave the website for more than 1 hour. Now click on any link and notice that the user’s session is still accessible. Actual results: User's session is not expired even after a day of inactivity. Expected results: The website should logout user's session automatically after 60 minutes of inactivity. For more info on session timeout problem visit - https://www.owasp.org/index.php/Session_Timeout
This is not a bug but the desired behavior. Most developers would hate to be logged out every hour or so. You are free to log out if you don't use your session anymore.
Group: bugzilla-security
Status: UNCONFIRMED → RESOLVED
Closed: 12 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.