TOTP Session lifetime

[jerebernard]

Hello all,
Is it possible to notify the connected user about his expiration of his TOTP session ?
Or even better, it would be interesting to know the remaining lifetime before expiration, for example via the Authorised page.
What do you think?

[jerebernard]

Hello,
Just to clarify my request.
It's related to the releases note
Notifications are now built in, a user can allow notifications to be prompted to re-authorise.

But I cannot see how to configure.
Actually when I'm connected, chrome (via the MFA webpage) doesn't send any notification about the session expiration.

I maybe missed something.

[NHAS]

Howdy. Forgot to reply as this week has been hectic.

I think displaying the time in the users session is a good idea and I can't believe I haven't thought of that already.

As for notifications, you will need to be running the wag tunnel over https, and it should prompt you to allow notifications.

If it doesnt then perhaps I've misunderstood the web API for it and it needs a user action to prompt.

[jerebernard]

On my config, I'm not running the wag tunnel over https only http.
I will try to configure the tunnel over https and let you know.

[jerebernard]

Hello,
I test using HTTPS on the tunnel portal and notification works. The notification only propose to authenticate to the VPN.
An advice for new functionnality :
-Insert expiration time on the tunnel portal
-Propose on the tunnel portal to reauthenticate when you want.
-Add a notification before expiration (ex : 30min before) which propose to reauthenticate to avoid disconnection

[NHAS]

Hm, I think adding maximum session time to the tunnel portal is a good idea.

The user can already reauthenticate whenever they want by logging out and logging in again.

I think that notification before expiry isnt really required? You may need to increase your maximum session time, most of the time the inactivity timer should be totally fine for this use case.

I.e as long as the users device is sending packets the session should stay alive.

[jerebernard]

Yes at least show the time before expiration.