Add global user session timeout configuration

[patrickmann]

Resolves #11379

A new parameter global_session_timeout_interval is added to server.conf.
When this is present, you can no longer configure a timeout per user; and it overrides any previously configured user-specific timeout value!

Re-enable individual session timeouts by deleting the global setting from server.conf.

[bernd]

@patrickmann @boosty Is there a reason that this setting is a server.conf setting instead of a global runtime setting in the database?

Server config file settings have the drawback that they need to be in sync on all Graylog nodes and that changing the setting requires a server restart. The global user session timeout is a good candidate for a runtime rather than a server config file setting.

[patrickmann]

The global user session timeout is a good candidate for a runtime rather than a server config file setting

Makes sense - I'll fix that

[bernd]

The global user session timeout is a good candidate for a runtime rather than a server config file setting

Makes sense - I'll fix that

Thank you! 🙏

Please talk with a frontend developer about where users would set the global session timeout. I probably fits somewhere in "System / Users and Teams".

[gally47]

Frontend is ready for review. in System/Configuration I added a panel for User Configuration to enable the feature and assign a timeout value, in System/Users and Teams I made sure the user session timeout is disabled when the global timeout is enabled.

[patrickmann]

@gally47 No input fields are visible in the system config form when there is no existing configuration entry in the cluster_config DB collection.
I would expect it to always be present - just disabled and with no / default value when it has never been set.

[ousmaneo]

I tested it and the feature works ! I made some comments and suggestion about some findings

[ousmaneo]

The frontend looks good! I added a small comment.

[ousmaneo]

LGTM !
I noticed that we display the global timeout on the user overview page. We should also indicate that this is set globally.

[ousmaneo]

LGTM! Thank you!