add autologout session

app/Config/Filters.php

@@ -80,6 +80,12 @@ class Filters extends BaseConfig
             // Badge PDF generation posts (handled by auth; allow multiple submits without reload)
             'badge',
             'index.php/badge',
+
+            // Session keep-alive endpoint updates only the current browser session.
+            'session/ping',
+            'index.php/session/ping',
+            'session/ping-activity',
+            'index.php/session/ping-activity',
         ]],
     ],
     'after' => [

app/Config/Routes.php

@@ -288,7 +288,9 @@ $routes->get('ui/style', 'View\UiController::style');
 
 
 //Timeout page after timeout
+$routes->get('session/get-timeout-config', 'View\SessionTimeoutController::getTimeoutConfig');
 $routes->get('session/check-timeout', 'View\SessionTimeoutController::checkTimeout');
+$routes->post('session/ping-activity', 'View\SessionTimeoutController::pingActivity');
 $routes->post('session/ping', 'View\SessionTimeoutController::pingActivity');
 
 

app/Config/SessionTimeout.php

@@ -4,14 +4,14 @@ namespace Config;
 
 class SessionTimeout
 {
-    // Session timeout in seconds (12 hours)
-    public const TIMEOUT_DURATION = 43200;
+    // Session timeout in seconds (30 minutes)
+    public const TIMEOUT_DURATION = 1800;
     
-    // Warning threshold in seconds (5 minutes before timeout)
-    public const WARNING_THRESHOLD = 42900;
+    // Show warning after 25 minutes of inactivity (5 minutes before timeout)
+    public const WARNING_THRESHOLD = 1500;
     
     // Server-side check interval (in seconds)
-    public const CHECK_INTERVAL = 300; // 5 minutes
+    public const CHECK_INTERVAL = 60; // 1 minute
     
     // Client-side check interval (in milliseconds)
     public const CLIENT_CHECK_INTERVAL = 60000; // 1 minute