- Shipped
- 4 ஆகஸ்ட், 2026 அன்று 4:24 AM UTC
- Author
- kamo
- Commit
- 5b50cc1
The Aug 2 HIPAA session added **************** as a second, parallel idle system. The layout already had the original one — ClientActivityTracker + SessionManager + sessionMonitor — which proactively extends the session while the user is active (no popup ever appears) and, when the warning does show, extends and dismisses on any mouse/key activity. The new dialog deliberately ignored activity and demanded a 'Stay signed in' click, and hardcoded a 15-minute limit that ignored the org's configured session timeout. Idle logoff remains enforced by the original path: no activity means no extends, the Redis TTL decays to the org timeout, and expiry routes through /logout.