feat(security): implement session management features including idle timeout, keepalive, and secure logout

2026-09-11 15:47:09 +02:00
parent dc740fb94d
commit e012d6d21c
7 changed files with 515 additions and 5 deletions
@@ -129,3 +129,13 @@ function get_ai_settings(): array {
    ];
 }

+/**
+ * Haalt geconfigureerde sessie idle timeout in seconden op conform NIST SP 800-63B / ISO 27001
+ * Toegestane waarden: 900 (15m), 1800 (30m - default), 3600 (60m), 7200 (120m)
+ */
+function get_session_idle_timeout(): int {
+    $timeout = (int)get_system_setting('session_idle_timeout', 1800);
+    $validTimeouts = [900, 1800, 3600, 7200];
+    return in_array($timeout, $validTimeouts, true) ? $timeout : 1800;
+}
+