Session Inactivity Timeout

Lukas · March 4, 2020, 10:57am

Hi,

It’s most likely that you are experiencing this issue which will be fixed in 3.13.4:

github.com/matomo-org/matomo

'Remember me' not working because cookie expire is in wrong format

opened 09:55AM - 26 Feb 20 UTC

closed 08:24PM - 02 Mar 20 UTC

matzesa

Bug Regression

After logging in the MATOMO_SESSID Cookie is changed via the http header set-coo…kie and an expires directive is added. But the format of the value is unixtime instead of date (https://tools.ietf.org/html/rfc6265#section-4.1) Example (Version 3.13.3): ``` Set-Cookie: MATOMO_SESSID=380lf4cjmaenc605u73dgklnq9; expires=1583920346; path=/; secure; httponly; SameSite=Lax ``` Found the following code line, perhaps it helps, but did not inspect deeper: https://github.com/matomo-org/matomo/blob/35467f54cd3e1dae889d88ae4f80d4626f9127ed/core/Session.php#L210 Here it seems to be converted: https://github.com/matomo-org/matomo/blob/35467f54cd3e1dae889d88ae4f80d4626f9127ed/core/Cookie.php#L155