AuthTimeout in Yii2

Question

I try to automatically log out in yii2 after it has been idle for fixed seconds. In web.php I added

 'user' => [ 'identityClass' => 'app\models\User', 'enableAutoLogin' => true, 'authTimeout'=>100 ], 

inside components . I am using a basic template. But it does not exit the system automatically. Does it work in Yii2? I followed the documentation from http://www.yiiframework.com/doc-2.0/yii-web-user.html

Answer 1

$authTimeout is a public property.

The number of seconds during which the user will be logged out automatically if he remains inactive. If this property is not set, the user will be logged out after the expiration of the current session (cf yii\web\Session::$timeout ).

Note that this will not work if $enableAutoLogin is true .

Answer 2

Your configuration is correct. But it will not automatically refresh your page and show your registration form. Technically, it will only log out at the next request after the session expires. And you should be aware of the ajax scripts running on your page and call up some other pages on a time interval. Each request will extend the session timeout. There is also the "absoluteAuthTimeout" parameter instead of the "authTimeout", which will exit the system after a timeout, despite your activity.

Answer 3

In your config/web.php :

In the $config array:

...

 'user' => [ 'identityClass' => 'app\models\User', //'enableAutoLogin' => true, 'enableSession' => true, 'authTimeout' => 60, ], 

...

Note that I commented on //enableAutoLogin , which prevents authTimeout from working authTimeout

Answer 4

You can also use

 session.gc_maxlifetime 

in php.ini

The default is 1440 seconds.

Answer 5

if you want to log out after X-time. You have to check with ajax every second. If the forwarding period for logout has expired

Answer 6

Just remove "enableAutoLogin" from your user configuration and it will work fine.

Your code will look like this:

 'user' => [ 'identityClass' => 'app\models\User', 'authTimeout'=>100 ],