commit dc414b50c19bea912babb00cf8f1e090dbbcc3b7
author Jason M. Bills <jason.m.bills@linux.intel.com> Thu Aug 05 15:20:25 2021 -0700
committer Ed Tanous <ed@tanous.net> Thu Aug 12 18:19:34 2021 +0000
tree 7d9d49801e95c28887064394205b810d43ea78a4
parent 735ef6d87392d643901ffede8042652b29d8cce7

Reduce session timeout to 30 minutes

This reduces our web session timeout to 30 minutes per
NIST guidelines:

"Reauthentication of the subscriber SHALL be repeated following
any period of inactivity lasting 30 minutes or longer."

https://pages.nist.gov/800-63-3/sp800-63b.html

Change-Id: Icb600b5bc026107f582bc93be355bc5e2b46677d
Signed-off-by: Jason M. Bills <jason.m.bills@linux.intel.com>

include/sessions.hpp

diff --git a/include/sessions.hpp b/include/sessions.hpp
index a448b24..b0d6ca7 100644
--- a/include/sessions.hpp
+++ b/include/sessions.hpp
@@ -412,7 +412,7 @@
     AuthConfigMethods authMethodsConfig;
 
   private:
-    SessionStore() : timeoutInSeconds(3600)
+    SessionStore() : timeoutInSeconds(1800)
     {}
 };