OPNsense Forum

English Forums => 25.1, 25.4 Production Series => Topic started by: OPNenthu on March 13, 2025, 02:37:00 AM

Title: [Closed] 25.1.3 - Web GUI session did not time out
Post by: OPNenthu on March 13, 2025, 02:37:00 AM
Noticed this after upgrade from 25.1.2 which, if I recall correctly, was working.  I had left my browser window open and logged-in to OPNsense GUI overnight.  Today when I sat down at the computer the session was still active and did not present a login prompt.  I then applied some Windows updates and rebooted, and after launching the browser again the session was still active.

GUI timeout is set to the default 240 minutes in System->Settings->Administration .  Browser is Firefox.  I did not check the shell timeout.

Will try again to reproduce.
Title: Re: 25.1.3 - Web GUI session did not time out
Post by: newsense on March 13, 2025, 04:05:46 AM
Creds saved in the browser ? Do you see it happening in other browsers such as Mullvad or Brave ?
Title: Re: 25.1.3 - Web GUI session did not time out
Post by: OPNenthu on March 13, 2025, 04:37:50 AM
Negative, no saved creds in FF.

pwlist.png

Quote from: newsense on March 13, 2025, 04:05:46 AMMullvad or Brave ?

I have neither, but I can be bothered to fire up Edge  **shudders**

I'll try it and FF again tonight.
Title: Re: 25.1.3 - Web GUI session did not time out
Post by: OPNenthu on March 13, 2025, 07:25:05 PM
Unable to reproduce.

I opened 4 admin sessions last night:
- Firefox web GUI
- Edge web GUI
- Serial console
- SSH

All were timed out today.