spring boot - Logged out from Multiple applications for inactive user in oauth 2.0 -


i using spring boot , oauth2.0 jwt. polymer being used on client side.

problem

i working on requirement logout user of it's logged in applications if remains idle more 15 minutes in applications. if user active in single application, user should not logged out application has opened.

solution

i think solution above problem application on server should maintain expiry time user. whenever application becomes active i.e. accesses secured api on resource server, server application should update expiry date against user in list. should expose expiry date against user in rest api.

the client application in polymer, should ping rest api after short intervals see if expiry time has reached. if yes, should logout , show logout screen client automatically.

please share views , suggest.


Comments

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

jquery - Responsive Navbar with Sub Navbar -