authTimeout in Yii2

Question

I am trying to log out user automatically in yii2 after he is idle for a fixed seconds . In web.php I added

'user' => [
            'identityClass' => 'app\models\User',
            'enableAutoLogin' => true,
            'authTimeout'=>100
        ],

inside components . I am using basic template. But it is not logging out automatically. Does this work in Yii2? I was following documentation from http://www.yiiframework.com/doc-2.0/yii-web-user.html

Do you expect completely automatic logout? I think it will happen only if user was unactive for this amount of time and then tries to open / refresh certain page. — arogachev, May 06 '15 at 11:11
I asked about details of that. Custom javascript is needed in order to achieve complete automatic logout. See @Pavel Bariev's answer. — arogachev, May 06 '15 at 11:13
then what difference the value for authTimeout brings to the system? — user7282, May 06 '15 at 11:43

score 4 · Answer 1 · edited May 29 '15 at 08:25

4

$authTimeout - public property.

The number of seconds in which the user will be logged out automatically if he remains inactive. If this property is not set, the user will be logged out after the current session expires (c.f. yii\web\Session::$timeout).

Note that this will not work if $enableAutoLogin is true.

edited May 29 '15 at 08:25

arogachev

33,150
7
114
117

answered May 29 '15 at 06:59

Andrei Putivet

71
2

score 1 · Answer 2 · answered May 06 '15 at 11:10

1

Your config is correct. But it will not automatically refresh your page and show you login form. Technically it will log you out only at the next request after the session is expired. And you should be aware of ajax scripts working on your page and calling some other pages by time interval. Every request will renew your session timeout. There is also "absoluteAuthTimeout" parameter instead of "authTimeout" - that will log you out after the timeout despite of your activity.

answered May 06 '15 at 11:10

Pavel Bariev

2,546
1
18
21

but it is not working . I tried absoluteAuthTimeout also – user7282 May 06 '15 at 11:13
This is exactly what I want to specify / explain in my comment. The user didn't provide details about that. – arogachev May 06 '15 at 11:15

score 0 · Answer 3 · edited Feb 22 '16 at 12:48

0

In your config/web.php file:

In $config array:

...

'user' => [
            'identityClass' => 'app\models\User',
            //'enableAutoLogin' => true,
            'enableSession' => true,
            'authTimeout' => 60,
        ],

...

Please note I commented the //enableAutoLogin, that prevents of authTimeout to work properly

edited Feb 22 '16 at 12:48

GAMITG

3,810
7
32
51

answered Jul 31 '15 at 17:23

Mr_LinDowsMac

2,644
9
56
75

score 0 · Answer 4 · answered Dec 09 '15 at 18:47

0

You can also use

session.gc_maxlifetime

setting in php.ini

By default it is 1440 secs.

answered Dec 09 '15 at 18:47

uglovvic uglovvic

29
1

score 0 · Answer 5 · answered Jul 16 '16 at 16:06

0

if you want log out user after X time. You should check with ajax each second. If expired redirect to log out

answered Jul 16 '16 at 16:06

rakhmatov

369
3
9

I also implemented this functionality by this method only – user7282 Jul 17 '16 at 17:11

score 0 · Answer 6 · answered Dec 06 '16 at 14:29

0

Just remove "enableAutoLogin" from your user config and it will just work fine.

Your code shall look like this:

'user' => [
            'identityClass' => 'app\models\User',
            'authTimeout'=>100
        ],

answered Dec 06 '16 at 14:29

Ragheb AlKilany

913
3
11
20

authTimeout in Yii2

6 Answers6

Linked