Timeout page #103
Timeout page #103
Comments
Dan Butterworth from DVLA made a comment about requiring more discussion around accessibility vs security on this pattern. |
Comment by @terrysimpson99, copied from #207 (duplicate issue): I'll quote Jennifer's comment on #104: Can anyone respond to Jennifer's question? Secondly, the server-based timeout only measures time since page load. Pressing keys or moving a mouse have no effect on it. A user can spend 12 minutes crafting some text and then nip out for 3 minutes (answer the door, make a drink, call of nature) only to find themselves timed out. Is it feasible to have a timeout that is responsive to user activity? |
Comment by @joelanman, copied from #207 (duplicate issue): I've often thought it would be a good use of javascript to ping the server to continue the session whenever user activity is detected, to avoid the issue you mentioned. |
To add more context, the JavaScript idea would be particularly useful on pages where the user might spend a long time before submitting. For example a page where you might type in a large amount of text. JavaScript could ping the server as you type or interact, to stop the session timing out - it's user activity in the same way that moving from page to page is. |
What about providing the option to turn off the timeout? WCAG 2.2.1 offers a few options as examples and turning off is one that prevents us from making assumptions about the user: https://www.w3.org/TR/WCAG21/#timing-adjustable I'd also bear in mind that the WCAG recommendation for extending is at least 10 times the current limit |
@joelanman The client only needs to ping the server once prior to the warning. |
What
Protect users personal data by cancelling a session if it is inactive for a period of time.
Why
All services that use sessions already use, or should use this pattern.
Anything else
(contact the design system team for credentials) - some context here
Related patterns
#104 Timeout warning
The text was updated successfully, but these errors were encountered: