Session Inactivity Timeout

chiappa · March 3, 2020, 9:15pm

I have to login again to Matomo after not having used it for a certain amount of time. How can I extend the time set for the session inactivity timeout?

Thank you.
David.

Lukas · March 4, 2020, 10:57am

Hi,

It’s most likely that you are experiencing this issue which will be fixed in 3.13.4:

github.com/matomo-org/matomo

'Remember me' not working because cookie expire is in wrong format

opened 09:55AM - 26 Feb 20 UTC

closed 08:24PM - 02 Mar 20 UTC

matzesa

Bug Regression

After logging in the MATOMO_SESSID Cookie is changed via the http header set-coo…kie and an expires directive is added. But the format of the value is unixtime instead of date (https://tools.ietf.org/html/rfc6265#section-4.1) Example (Version 3.13.3): ``` Set-Cookie: MATOMO_SESSID=380lf4cjmaenc605u73dgklnq9; expires=1583920346; path=/; secure; httponly; SameSite=Lax ``` Found the following code line, perhaps it helps, but did not inspect deeper: https://github.com/matomo-org/matomo/blob/35467f54cd3e1dae889d88ae4f80d4626f9127ed/core/Session.php#L210 Here it seems to be converted: https://github.com/matomo-org/matomo/blob/35467f54cd3e1dae889d88ae4f80d4626f9127ed/core/Cookie.php#L155

chiappa · March 5, 2020, 11:32am

OK. Thank you for the reply!

Looking forward to 3.13.4.

Here is a screenshot of the message I’m getting; “Error: Your session has expired due to inactivity. Please log in to continue”.

Lukas · March 5, 2020, 5:57pm

Hi,

If you can’t wait, you can apply the change from Fix session cookie expire by sgiehl · Pull Request #15633 · matomo-org/matomo · GitHub manually to the core/Session.php:

diff --git a/core/Session.php b/core/Session.php
index f2f984d357e..dd5b1229d70 100644
--- a/core/Session.php
+++ b/core/Session.php
@@ -222,7 +222,7 @@ public static function writeCookie($name, $value, $expires = 0, $path = '/', $do
     {
         $headerStr = 'Set-Cookie: ' . rawurlencode($name) . '=' . rawurlencode($value);
         if ($expires) {
-            $headerStr .= '; expires=' . $expires;
+            $headerStr .= '; expires=' . gmdate('D, d-M-Y H:i:s', $expires) . ' GMT';
         }
         if ($path) {
             $headerStr .= '; path=' . $path;

chiappa · March 26, 2020, 10:25am

Updated to Matomo 3.13.4 and started working, especially after I remembered to tick the “remember me” box… Thank you.

This is what my core/Session.php looks like;