> ## Documentation Index
> Fetch the complete documentation index at: https://docs.conduktor.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Session timeout configuration

> Configure session timeout and idle session time in Conduktor Console. Set maximum session lifetime and access token duration for user authentication.

## Session timeout overview

Conduktor uses long and short-lived tokens to verify authenticated users. By default, **the maximum session lifetime is three days**. This means that you can close Console and return within the three day window to continue your session without needing to re-authenticate.

You can also configure **the maximum idle session time** before a user becomes unauthenticated. The idle timeout represents the duration of the short-lived access token. This token will be refreshed periodically until either:

* the maximum session lifetime is reached or
* you close Conduktor for a period that extends the idle timeout value.

If the idle timeout value is not set, the same value as the maximum session time will be used. We recommend ensuring that **the idle timeout value is always less than or equal to the maximum session lifetime**.

### Configuration

Use the environment variables or configuration properties to configure your session lifetime requirements.

<Tabs>
  <Tab title="Environment variables">
    * `CDK_AUTH_SESSIONLIFETIME`: Max session lifetime in seconds. The default is 3 days.
    * `CDK_AUTH_IDLETIMEOUT`: Max idle session time in seconds (access token lifetime). If this value is not set, the same value will be taken from `CDK_AUTH_SESSIONLIFETIME`. Should be lower than `CDK_AUTH_SESSIONLIFETIME`.
  </Tab>

  <Tab title="Config properties">
    | Property               | Description                                                                                           | Environment Variable       | Mandatory | Type | Default value |
    | ---------------------- | ----------------------------------------------------------------------------------------------------- | -------------------------- | --------- | ---- | ------------- |
    | `auth.sessionLifetime` | Max session lifetime in seconds                                                                       | `CDK_AUTH_SESSIONLIFETIME` | false     | int  | `259200`      |
    | `auth.idleTimeout`     | Max idle session time in seconds (access token lifetime). Should be lower than `auth.sessionLifetime` | `CDK_AUTH_IDLETIMEOUT`     | false     | int  | `259200`      |
  </Tab>
</Tabs>