Skip to content

[v18] Fix frequent reauth in web UI#61103

Merged
avatus merged 3 commits intobranch/v18from
avatus/v18/reauth
Nov 10, 2025
Merged

[v18] Fix frequent reauth in web UI#61103
avatus merged 3 commits intobranch/v18from
avatus/v18/reauth

Conversation

@avatus
Copy link
Copy Markdown
Contributor

@avatus avatus commented Nov 6, 2025

Backport #58091, #58293, #59645

changelog: Fix the webUI timeout time to respect the cluster's WebIdleTimeout configuration.

do not merge until 18.4

supports https://github.com/gravitational/teleport.e/pull/7540

This updates the logic to only setting max-age if the provided expiry is
in the future rather than any non-zero value.
The webUI will log a user out due to invalid token if they haven't
pinged the server within the idle time, which defaulted to the bearer
token default (10 minutes). Instead, we will only default to 10 minutes
if the web_idle_timeout is not configured in the cluster config
@public-teleport-github-review-bot public-teleport-github-review-bot bot removed the request for review from rudream November 10, 2025 16:47
@avatus avatus added this pull request to the merge queue Nov 10, 2025
Merged via the queue into branch/v18 with commit 96056bb Nov 10, 2025
42 checks passed
@avatus avatus deleted the avatus/v18/reauth branch November 10, 2025 17:09
@aadc-dev aadc-dev mentioned this pull request Nov 13, 2025
@milos-teleport
Copy link
Copy Markdown
Contributor

Can this be backported to v17 @avatus ?

@avatus
Copy link
Copy Markdown
Contributor Author

avatus commented Nov 24, 2025

@milos-teleport we will not be backporting this to 17. I believe the word "fix" may be incorrect here, as it is not a fix, but more of hijacking of an existing configuration (granted, its a bit more intuitive this way), but it may cause unexpected behavior in clusters on v17, so due to the new release policy, this will be v18+ only

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants