The GitHub Actions job "CI" on rocketmq-dashboard.git/codex/session-idle-timeout has failed. Run started by GitHub user tju-yxq (triggered by tju-yxq).
Head commit for run: 38ecb327772d7463f32847427dfd6878d4d04677 / Yxq <[email protected]> feat(auth): revoke sessions unused past a configurable idle timeout Session tokens until now lived until their absolute expiry (24 hours by default) no matter how long they went unused: a token that leaked out of a browser, a shared workstation or a log stays valid for a full day with zero activity, even though the console already tracks last_seen_at per session and even labels sessions as stale after 15 minutes — purely for display. Add a sessionIdleTimeout general setting enforced on every authenticated request: - database-backed sessions unused longer than the window are rejected and revoked (revoked_at = now), so they disappear from the active-session views instead of lingering until their absolute expiry; - the scheduled session cleanup also revokes idle-expired rows, keeping the views truthful when the abandoned token is never presented again; the absolute-expiry delete keeps running as before; - the properties-based (in-memory) mode now tracks last-seen per token and enforces the same window; - rows written before last_seen_at existed keep the absolute deadline. The setting defaults to 30 minutes, uses 0 as the explicit opt-out, and resolves values 1-9 as 10 — above the 5-minute last-seen write throttle, so the throttled writes can never lag far enough to idle out a session that is actually in use. Saves from clients that predate the field keep the stored value instead of resetting it. Report URL: https://github.com/apache/rocketmq-dashboard/actions/runs/36891445737 With regards, GitHub Actions via GitBox
