User idle warning modal and auto logout (clear session) after configurable timeout value is hit by chadpalmer · Pull Request #800 · microsoft/simplechat

chadpalmer · 2026-03-13T18:09:44Z

This pull requests adds 1 new feature and 1 bug fix.

Added customizable app admin settings that set the amount of idle time before the app auto logs users out of chat.
The auto logout clears the session in chat, but does not sign the users out of their SSO accounts.
One of the admin settings sets how long before the auto logout the warning dialog appears letting the users know that they will logged out due to inactivity.
You can set the auto logout for 2 minutes of inactivity and the warning dialog to 1 minute for easy testing in the local Docker setup, but the admin settings variables can (and should be) adjusted for production. (30 minute idle time and 28 minute warning dialog for example)
The current setup allows the simple movement of the mouse pointer over the OIG Chat window to reset the idle timer and hide the warning dialog without the need to explicitly click the "Stay signed in" button.
BUG FIX: Fixed bug where settings object was mutated in place and then compared to itself.

(NOTE: The code went through a lot of iterations implementing copilot's suggestions. The code iterations are documented in the docs/explanations/fixes section so you can see the reasoning behind the iterations.)

New warning modal window:

Updated admin section:

…ow horizontal scroll in response window while preserving access to drop down menus.

…s out of oig chat and clears app session after certain time of inactivity.

Merge Deveopment into feedback-user-timeout

…ting section.

…estions.

…on/off and fixed some bugs.

…nor bug fix.

…s class.

…safe_int a util function.

… more intelligent.

…nt for extreme edge case.

…der to follow pattern.

…at into branch.

…ersion.

chadpalmer · 2026-03-13T19:49:09Z

@microsoft-github-policy-service agree

chadpalmer · 2026-03-13T19:50:23Z

@microsoft-github-policy-service agree

application/single_app/templates/base.html

application/single_app/app.py

application/single_app/functions_settings.py

application/single_app/route_frontend_admin_settings.py

Bionic711

Update the defaults to False.

… added default values to admin settings and moved global config variables to config.py file.

application/single_app/app.py

…nute timeout and allow warning dialog to be disabled.

Copilot

Pull request overview

Adds an idle-session timeout feature (with a warning modal + configurable admin settings) and fixes settings deep-merge persistence so newly added default keys get upserted back to Cosmos and cache stays consistent.

Changes:

Add server-side idle timeout enforcement + /api/session/heartbeat and a client-side warning/countdown + local logout flow.
Add admin settings UI + route parsing for idle timeout/warning/message configuration.
Fix get_settings() deep-merge persistence logic by making deep_merge_dicts() return a “changed” flag and upserting on change; add functional tests + docs/release notes.

Reviewed changes

Copilot reviewed 20 out of 22 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
functional_tests/test_settings_deep_merge_persistence_fix.py	Functional regression test for deep-merge persistence wiring.
functional_tests/test_idle_logout_timeout.py	Functional wiring checks for idle timeout backend/frontend/admin settings integration.
functional_tests/test_admin_settings_safe_int_fallback_fix.py	Functional coverage for extracted safe-int parsing and route wiring.
docs/explanation/release_notes.md	Release notes entry for new idle timeout feature and merge persistence fix.
docs/explanation/fixes/v0.239.012/SETTINGS_DEEP_MERGE_PERSISTENCE_FIX.md	Fix documentation for merge persistence change.
docs/explanation/fixes/v0.239.012/IDLE_SESSION_API_ACTIVITY_SEED_FIX.md	Fix documentation for API activity timestamp seeding.
docs/explanation/fixes/v0.239.012/IDLE_HEARTBEAT_REAUTH_HANDLING_FIX.md	Fix documentation for heartbeat reauth handling.
docs/explanation/fixes/v0.239.012/IDLE_HEARTBEAT_INTERVAL_FIX.md	Fix documentation for heartbeat interval scaling.
docs/explanation/fixes/v0.239.012/ADMIN_SETTINGS_SAFE_INT_FALLBACK_FIX.md	Fix documentation for safe-int fallback hardening.
application/single_app/templates/base.html	Injects idle-timeout config + warning modal markup and loads idle warning JS for signed-in users.
application/single_app/templates/admin_settings.html	Adds idle timeout settings fields + toggle section in admin UI.
application/single_app/static/js/idle-logout-warning.js	Implements client-side timers, warning modal, countdown, and heartbeat-driven session refresh/logout behavior.
application/single_app/static/js/admin/admin_settings.js	Toggles the idle-timeout settings section visibility based on the switch.
application/single_app/static/images/custom_logo_dark.png	Adds/updates image asset.
application/single_app/static/images/custom_logo.png	Adds/updates image asset.
application/single_app/static/css/chats.css	Adjusts `.message-content` overflow comment (and preserves overflow behavior).
application/single_app/route_frontend_authentication.py	Adds local logout route and initializes/clears `last_activity_epoch` during auth flows.
application/single_app/route_frontend_admin_settings.py	Parses and persists idle timeout settings; introduces structured int parsing via helper.
application/single_app/functions_settings.py	Adds idle timeout defaults; fixes deep-merge change detection/persistence and adds settings-source logging + cache update on upsert.
application/single_app/config.py	Bumps VERSION; introduces idle-timeout exempt path/prefix lists; minor indentation fix.
application/single_app/app.py	Adds request-scoped settings helper, settings-source logging, idle timeout enforcement, and heartbeat endpoint; injects idle timeout vars into templates.
application/single_app/admin_settings_int_utils.py	New helper module for robust int parsing with source reporting.

application/single_app/route_frontend_authentication.py

application/single_app/config.py

docs/explanation/fixes/v0.240.002/SETTINGS_DEEP_MERGE_PERSISTENCE_FIX.md

application/single_app/functions_settings.py

Bionic711 · 2026-03-31T21:37:14Z

application/single_app/static/images/custom_logo.png

Need to undelete these files. Not sure why running it locally sometimes deletes these.

Files undeleted and added fix to prevent local deletion in the future.

Bionic711 · 2026-03-31T21:37:20Z

application/single_app/static/images/custom_logo_dark.png

Need to undelete these files. Not sure why running it locally sometimes deletes these.

Files undeleted and added fix to prevent local deletion in the future.

Bionic711 · 2026-03-31T21:44:39Z

application/single_app/route_frontend_authentication.py

            logout_url += f"&logout_hint={quote(user_email)}"

-        print(f"{user_name} logged out. Redirecting to Azure AD logout.")
+        # print(f"{user_name} logged out. Redirecting to Azure AD logout.")


Either remove this or convert to using log_event from function_appinsights.py and adding an activity log that the user signed out (or was forced signed out).

Converted to debug_print to match style in rest of file. Can convert to log_event if desired more than file consistency.

Bionic711 · 2026-03-31T21:44:53Z

application/single_app/route_frontend_authentication.py

+        # print(f"Front Door enabled: {settings.get('enable_front_door', False)}")
+        # print(f"Front Door URL: {settings.get('front_door_url')}")
+        # print(f"Logout redirect URI: {logout_uri}")


Either remove this or convert to using log_event from function_appinsights.py and adding an activity log that the user signed out (or was forced signed out).

Converted to debug_print to match style in rest of file. Can convert to log_event if desired more than file consistency.

Bionic711 · 2026-03-31T21:47:27Z

application/single_app/functions_settings.py

+                    # print(
+                    #     "Warning: Failed to get settings from cache, read from Cosmos DB instead. "
+                    #     f"Called from {caller_file}:{caller_line} in {caller_func}()."
+                    # )


Please remove this.

Bionic711 · 2026-03-31T21:47:38Z

application/single_app/functions_settings.py

+                    # print(
+                    #     "Warning: Failed to get settings from cache, "
+                    #     "read from Cosmos DB instead. (no caller frame)"
+                    # )


Please remove this.

Bionic711 · 2026-03-31T21:47:52Z

application/single_app/functions_settings.py

    except Exception as e:
-        print(f"Error retrieving settings: {str(e)}")
-        return None
+        # print(f"Error retrieving settings: {str(e)}")


Please remove this.

Bionic711 · 2026-03-31T21:47:57Z

application/single_app/functions_settings.py

        cosmos_settings_container.create_item(body=default_settings)
-        print("Default settings created in Cosmos and returned.")
-        return default_settings
+        # print("Default settings created in Cosmos and returned.")


Please remove this.

Bionic711

Couple more changes being requested. Small removals of dead code mostly and a restoration of the two logo files (you may need to grab them from a different copy of the repo). It happens when running the code locally.

Lastly, if you could pull a copy of Development, and merge into your branch to resolve any conflicts.

…ted/converted print statements.

chadpalmer · 2026-04-01T19:29:11Z

Couple more changes being requested. Small removals of dead code mostly and a restoration of the two logo files (you may need to grab them from a different copy of the repo). It happens when running the code locally.

Lastly, if you could pull a copy of Development, and merge into your branch to resolve any conflicts.

@Bionic711 I restored the logos, added a fix to prevent future deletion of logos, fixed merge conflicts, and converted /deleted commented out print statements.

chadpalmer added 20 commits February 25, 2026 18:21

fix_scroll - Added overflow: auto to message-content css class to all…

ac64920

…ow horizontal scroll in response window while preserving access to drop down menus.

feedback-user-timeout - Added user idle timeout feature that auto log…

d31afe0

…s out of oig chat and clears app session after certain time of inactivity.

feedback-user-timeout - fixed merge conflict with microsoft update.

b1b2a82

Merge branch 'Development' into feedback-user-timeout

f216d68

Merge Deveopment into feedback-user-timeout

feedback-user-timeout - Moved new settings variables to app admin set…

765a847

…ting section.

feedback-user-timeout - Cleaned up code as per some of copilot's sugg…

b8c62a1

…estions.

feedback-user-timeout - Added admin settings toggle to allow turning …

8f692f9

…on/off and fixed some bugs.

feedback-user-timeout - Added logging and method comments.

7fd6a0a

feedback-user-timeout - Merge latest updates and fix merge conflicts.

9315739

feedback-user-timeout - Updated/cleaned up release notes and added mi…

0519999

…nor bug fix.

feedback-user-timeout - More code clean up for safe_int method and cs…

6431de2

…s class.

feedback-user-timeout - More code clean up for unit tests and making …

8ea5b81

…safe_int a util function.

feedback-user-timeout - Added missing utils file to repo.

4b869f2

feedback-user-timeout - Made api call's interaction with idle timeout…

1be8338

… more intelligent.

feedback-user-timeout - Adjusted idle timeout initialization to accou…

dce26d7

…nt for extreme edge case.

feedback-user-timeout - Adjusted idle heartbeat reauth handling.

1de1b06

feedback-user-timeout - Moved fixes documentation into v0.239.006 fol…

567d661

…der to follow pattern.

feedback-user-timeout - Merged latest updates from microsoft simplech…

fa9b24c

…at into branch.

feedback-user-timeout - Updated doc folder name to match new update v…

c87df0a

…ersion.

trigger cla check

8daeecc

Bionic711 reviewed Mar 16, 2026

View reviewed changes

application/single_app/templates/base.html Outdated Show resolved Hide resolved

Bionic711 reviewed Mar 16, 2026

View reviewed changes

application/single_app/app.py Outdated Show resolved Hide resolved

Bionic711 reviewed Mar 16, 2026

View reviewed changes

application/single_app/functions_settings.py Outdated Show resolved Hide resolved

Bionic711 reviewed Mar 16, 2026

View reviewed changes

application/single_app/route_frontend_admin_settings.py Show resolved Hide resolved

Bionic711 requested changes Mar 16, 2026

View reviewed changes

feedback-user-timeout - Updated default idle enabled values to false,…

a5a95f4

… added default values to admin settings and moved global config variables to config.py file.

Copilot AI review requested due to automatic review settings March 16, 2026 21:34

Copilot started reviewing on behalf of chadpalmer March 16, 2026 21:35 View session

Bionic711 reviewed Mar 19, 2026

View reviewed changes

application/single_app/app.py Outdated Show resolved Hide resolved

Bionic711 reviewed Mar 19, 2026

View reviewed changes

application/single_app/app.py Outdated Show resolved Hide resolved

chadpalmer added 2 commits March 24, 2026 10:16

Merge branch 'Development' into feedback-user-timeout

ea6a341

feedback-user-timeout - Added custom message field, enforce min 10 mi…

2b63923

…nute timeout and allow warning dialog to be disabled.

Copilot AI review requested due to automatic review settings March 24, 2026 19:30

Copilot started reviewing on behalf of chadpalmer March 24, 2026 19:31 View session

Copilot AI reviewed Mar 24, 2026

View reviewed changes

chadpalmer added 2 commits March 24, 2026 20:06

feedback-user-timeout - Updated/fixed issues flagged by github copilot.

e178c24

feedback-user-timeout - Added doc files in new folder.

79d3e18

paullizer self-requested a review March 27, 2026 01:17

paullizer approved these changes Mar 27, 2026

View reviewed changes

paullizer requested a review from Bionic711 March 27, 2026 09:43

Bionic711 reviewed Mar 31, 2026

View reviewed changes

Bionic711 requested changes Mar 31, 2026

View reviewed changes

chadpalmer force-pushed the feedback-user-timeout branch from a6d5c7d to 79d3e18 Compare March 31, 2026 21:55

chadpalmer added 4 commits April 1, 2026 18:04

Fixed auto-delete of custom logo images issue.

3209cb8

feedback-user-timeout - Fixed merge conflict.

5d465ff

feedback-user-timeout - Fixed several code issues from merge and dele…

1cc8ff7

…ted/converted print statements.

feedback-user-timeout - Added missing logo images.

e269b51

chadpalmer requested a review from Bionic711 April 1, 2026 19:27

Bionic711 approved these changes Apr 1, 2026

View reviewed changes

Bionic711 merged commit 0527e8d into microsoft:Development Apr 1, 2026
5 checks passed

Conversation

chadpalmer commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chadpalmer commented Mar 13, 2026

Uh oh!

chadpalmer commented Mar 13, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Bionic711 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Bionic711 left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

chadpalmer commented Apr 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

chadpalmer commented Mar 13, 2026 •

edited

Loading

Bionic711 left a comment •

edited

Loading