Customizing session timeout

Overview

Session timeout functions as follows:

1If there is no user activity (API calls) for a default period of 30 minutes, the login session will timeout. When this occurs, the following alert message will be displayed:
2By default a notification period of 20 seconds will then start before the session fully expires and the user will need to re-login.
3After a default period of 20 hours, a session will timeout regardless of whether there is continuous user activity during this period.

Customizing the timeout

You can alter all session timeout periods by editing the following files. On completion, save the filesand ensure that you restart all CAST Imaging services/containersso that the changes are taken into account.

Timeout optionFile to editLine to change
Notification period (20 seconds)
Microsoft Windows traditional installer:
%PROGRAMFILES%\CAST\ImagingSystem\nginx\html\app-config.js

Docker Installer extension (located in the folder created when unzipping the extension):
server\nginx\html\app.config

Find this line:

sessionTimeoutAlertBefore: 20, // In Seconds

Change the time to the preferred notification period, in seconds:

sessionTimeoutAlertBefore: 60, // In Seconds
Timeout (30 minutes)
Microsoft Windows traditional installer:
%APPDATA%\CAST\ImagingSystem\login\application.properties

Docker Installer extension (located in the folder created when unzipping the extension):
server\login\application.properties or login\application.properties

Find this line:

jwt.token.timeout.minutes=30

Change the time to the preferred timeout period, in minutes:

jwt.token.timeout.minutes=60
Global timeout (20hrs)

Find this line:

refresh.token.timeout.minutes=1200

Change the time to the preferred global timeout period, in minutes:

refresh.token.timeout.minutes=300