WIP: feat(auth): automatic logoff after user inactivity (UI API 1.12.0) #30

Draft
james.maes wants to merge 1 commits from feat/session-user-activity into main
pull from: feat/session-user-activity
1 Commits
Author SHA1 Message Date
james.maesandClaude Fable 5.2 d3258bf52a feat(auth): automatic logoff after user inactivity (UI API 1.12.0)
android / android (push) Successful in 7m26s
build / android (push) Successful in 7m26s
Every request of a signed-in session states the age of the operator's last
touch, key or scan in X-QQQ-User-Activity-Age, so the session heartbeat alone
no longer keeps a session alive on a server with a user inactivity timeout.
When the server publishes userInactivityTimeoutSeconds the scanner warns a
minute before and signs out when it runs out; the server ends the session at
the next request regardless. Servers without the value are unaffected.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
2026-11-10 12:38:26 -06:00