EBMS Tickets

There is a logout message on DEV, but I don't think I've ever seen this on PROD. I'm attaching a screenshot from DEV.

I did a proof-of-concept for this one when I was waiting for feedback on the active EBMS tickets. I used a third-party module to provide a popup warning that your session was going to be logged out, and giving you an opportunity to keep it alive. Won't be rolled up the tiers as long as this ticket is in the backlog, but the solution appears to work.

Ah, that makes sense.

Do you know how long one must be idle for the warning popup message to come up? And, if ignored, how long before you are logged off?

That's configurable. I set the popup to come up a few minutes before the server would time out your session. I believe I wait 10 seconds for you to let me know you'd like the session to be kept alive.

We'll need to get CBIIT to install this module on the upper tiers.

As we discussed in our CDR/EBMS meeting last week, given that the time out occurs after 1 hour of inactivity, we would like to have the pop-up appear at 55 minutes and log you off 4.5 minutes after that. Bob will look into the feasibility of having the browser button on the task bar blink when the pop-up appears in order to notify the user if the browser window is not in the foreground. Thanks.

I changed the 10-second delay to 4 1/2 minutes (on DEV); ready for testing.

For configuration script:

$ drush vset --yes autologout_timeout 3500
$ drush vset --yes autologout_padding 270

Would it be possible to reword the pop-up message as follows? Thanks.

"Your session is about to expire. Do you want to remain logged in?"

I verified the timing. The pop-up did not cause the browser button to blink on my taskbar.

Message changed.

Note to myself: drush can't set multi-word variables. Have to do this myself manually.

Found a way to do it with drush:

echo -n "Your session is about to expire. Do you want to remain logged in?" | drush vset autologout_message -

Verified on DEV. Thanks!

Verified on QA.

Verified the appearance of log-off pop-up message and green "you've been logged off" message on the login screen. However, the system doesn't always actually log off the user. I am often able to click "NIH LOGIN" and get right back into the EBMS without entering my password. We may want to revisit this in the future. In the meantime, I'll mark it verified on prod since I believe the goals of this issue were accomplished.