- Ya
- 4 Agosti 2026, 04:24 UTC
- Mwandishi
- kamo
- Ahadi ya
- 5b50cc1
The Aug 2 HIPAA session added **************** as a second, parallel idle system. The layout already had the original one — ClientActivityTracker + SessionManager + sessionMonitor — which proactively extends the session while the user is active (no popup ever appears) and, when the warning does show, extends and dismisses on any mouse/key activity. The new dialog deliberately ignored activity and demanded a 'Stay signed in' click, and hardcoded a 15-minute limit that ignored the org's configured session timeout. Idle logoff remains enforced by the original path: no activity means no extends, the Redis TTL decays to the org timeout, and expiry routes through /logout.