Skip to content

Instantly share code, notes, and snippets.

@gerard-kanters
Last active March 6, 2024 18:49
Show Gist options
  • Star 47 You must be signed in to star a gist
  • Fork 19 You must be signed in to fork a gist
  • Save gerard-kanters/2ce9daa5c23d8abe36c2 to your computer and use it in GitHub Desktop.
Save gerard-kanters/2ce9daa5c23d8abe36c2 to your computer and use it in GitHub Desktop.
Inactivity timeout javascript
<script type="text/javascript">
function idleTimer() {
var t;
//window.onload = resetTimer;
window.onmousemove = resetTimer; // catches mouse movements
window.onmousedown = resetTimer; // catches mouse movements
window.onclick = resetTimer; // catches mouse clicks
window.onscroll = resetTimer; // catches scrolling
window.onkeypress = resetTimer; //catches keyboard actions
function logout() {
window.location.href = '/action/logout'; //Adapt to actual logout script
}
function reload() {
window.location = self.location.href; //Reloads the current page
}
function resetTimer() {
clearTimeout(t);
t = setTimeout(logout, 1800000); // time is in milliseconds (1000 is 1 second)
t= setTimeout(reload, 300000); // time is in milliseconds (1000 is 1 second)
}
}
idleTimer();
</script>
@zerokewl88
Copy link

@gerard-kanters Hi, just found this post while thinking of a way to sort this out for our Web System that we have - and just wanted to let you know, that Smart Browers like Chrome keep an eye out on the Input Field names, and suggest automatic completion, it doesnt matter if you set autocomplete="off" the browsers will still always try to help you complete it. I found 2 ways around this, and seems to be the only way that i found, and that is 1) after a period of time when loading a screen with login details to clear the inputs, or 2) change the input field names each time you load the screen with a random input name value . Browsers use these value names to help suggest autocomplete.

In regards to having the automatic logout - depending on the system use / importance i think its quite valid to kick someone out of a system after a period of time to keep say 'records for logged in and current active users' a valid metric if your monitoring that - but of course that is in addition to actually keeping security concerns in mind. If the period to go make a coffee and come back kicks you out and is not exactly helpful, then i would just think that the inactive period is just to short - one of the systems we have does this at a 15 minute mark and works quite well.

@jeffcorey
Copy link

Very useful script. Thanks for sharing! Anyone tested this on iPad? Just curious if it works with touch as well. Thanks

@alanensina
Copy link

Thanks @gerard-kanters, this helped me a lot. :)

@kalyondo
Copy link

WOw! After tens of google searches, I seem to have made head ways, @gerard-kanters thanks many.

@culniga
Copy link

culniga commented Jul 24, 2019

Instead of listing number of events you can use events on window.blur to clear timer and window.focus to start timer
You can modify this solution: https://stackoverflow.com/questions/1760250/how-to-tell-if-browser-tab-is-active

@ndraiman
Copy link

@culniga You can use the browser's Page Visibility API instead, its more reliable.

@starbuck93
Copy link

@nexxado, good suggestion:

document.addEventListener('visibilitychange', function () {
    var t;
    if (document.hidden) {
        // start inactivity timeout
        
        function logout(){
            window.location.href = '/logout';
        }
        t = setTimeout(logout, 1800000);
    } else {
        clearTimeout(t);
    }
});

@Robin-the-Frog
Copy link

Robin-the-Frog commented Oct 19, 2020

@gerard-kanters
Like some others I found this after hours of fruitless Google searching. Thanks so much, this is working well for me. I have commented out the reload sections though.
How could I alter the code (I'm pretty much a noob in js) so that the code ignores my 'login' page?
Thanks

@sankhadipsen
Copy link

There's one in my Repo in case someone wants to check.

@EynoRahul
Copy link

if the admin wants that on that page he pauses for 15 mins data will be automatically saved into the database then how to identify the page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment