Mews community: Session expiration time

Hello,

I raised this with Mews after noticing that the security token uses a 24-hour timer that completely disregards user activity, which results in users being signed out at seemingly random times.

What is happening is that the secure link token automatically expires after around 24 hours, regardless of whether the user is active or inactive during that period. The timer does not reset even if the user remains active for the entire duration.

In contrast to your suggestion, I proposed to Mews that this window be shortened to around 12 hours. This would ensure that a new, forced secure sign-in is prompted each day when the user logs in, preventing the token from expiring randomly in the middle of a shift.

The main issue, however, is that users are not automatically logged out after a period of inactivity. For example, if I do not sign out of Mews before turning off my computer for the night, my account remains logged in in the background despite several hours of inactivity.

For security reasons, users should be automatically signed out after a defined period of inactivity. Each forced sign-out should also reset the secure token to ensure better protection.

I was talking about the Mews Community 😀

Oh, i see that now! 😀 I have not even noticed that there is a session expiration in the Community.