{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/11866","repository_url":"https://api.github.com/repos/joomla/joomla-cms","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/11866/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/11866/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/11866/events","html_url":"https://github.com/joomla/joomla-cms/issues/11866","id":174358517,"number":11866,"title":"Front-end users not always logged out after session inactivity time expires","user":{"login":"xristoph","id":6840948,"avatar_url":"https://avatars.githubusercontent.com/u/6840948?v=3","gravatar_id":"","url":"https://api.github.com/users/xristoph","html_url":"https://github.com/xristoph","followers_url":"https://api.github.com/users/xristoph/followers","following_url":"https://api.github.com/users/xristoph/following{/other_user}","gists_url":"https://api.github.com/users/xristoph/gists{/gist_id}","starred_url":"https://api.github.com/users/xristoph/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xristoph/subscriptions","organizations_url":"https://api.github.com/users/xristoph/orgs","repos_url":"https://api.github.com/users/xristoph/repos","events_url":"https://api.github.com/users/xristoph/events{/privacy}","received_events_url":"https://api.github.com/users/xristoph/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-08-31T19:32:10Z","updated_at":"2016-08-31T19:37:32Z","closed_at":null,"body":"### Steps to reproduce the issue\r\nRegistered users log into site. User walks away from computer, returns 24 hours later, wakes up computer and is still logged into site and user is able to perform actions without invalid token message or being asked to log in again.\r\n\r\n\r\n### Expected result\r\nAfter the session time of 120 minutes in-activity, user session would be forced logged out for any and all users on front-end.\r\n\r\n\r\n### Actual result\r\nUser session on front-end does not expire for all users, especially if they're in Kunena forums section of site, or JomSocial area\r\n\r\n\r\n### System information (as much as possible)\r\njoomla 3.5.1\r\njomsocial 4.2.4\r\nkunena 4.0.11\r\n\r\n### Additional comments\r\nsession handling is set to PHP, have verified users are not saving password (credentials) in browser\r\n"},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/243876352","html_url":"https://github.com/joomla/joomla-cms/issues/11866#issuecomment-243876352","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/11866","id":243876352,"user":{"login":"mbabker","id":368545,"avatar_url":"https://avatars.githubusercontent.com/u/368545?v=3","gravatar_id":"","url":"https://api.github.com/users/mbabker","html_url":"https://github.com/mbabker","followers_url":"https://api.github.com/users/mbabker/followers","following_url":"https://api.github.com/users/mbabker/following{/other_user}","gists_url":"https://api.github.com/users/mbabker/gists{/gist_id}","starred_url":"https://api.github.com/users/mbabker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mbabker/subscriptions","organizations_url":"https://api.github.com/users/mbabker/orgs","repos_url":"https://api.github.com/users/mbabker/repos","events_url":"https://api.github.com/users/mbabker/events{/privacy}","received_events_url":"https://api.github.com/users/mbabker/received_events","type":"User","site_admin":false},"created_at":"2016-08-31T19:37:32Z","updated_at":"2016-08-31T19:37:32Z","body":"If you've got the login module in use on the site, this is expected behavior.  See https://github.com/joomla/joomla-cms/issues/11756 for more info."}}
{"actor":{"display_login":"mbabker"}}