Managing session inactivity/idle timeout

[day0ops]

Version

No response

Is your feature request related to a problem? Please describe.

Currently theres multiple mechanisms for managing sessions, via Redis & cookie. In cookies, max-age is configurable which maintains the cookie throughout the life of the session. Cookies also don't have sliding expirations. However, none of these solutions offer any mechanism to keep track of activity.

Describe the solution you'd like

Since Gloo Edge (or ext auth) has knowledge of the requests being made we can potentially use this to clear the session when a certain inactive timeout has been reached

Describe alternatives you've considered

No response

Additional Context

IBM Webseal exposes this capability.

[chrisgaun]

Context https://solo-io-corp.slack.com/archives/CEDCS8TAP/p1661810051367159

[github-actions[bot]]

This issue has been marked as stale because of no activity in the last 180 days. It will be closed in the next 180 days unless it is tagged "no stalebot" or other activity occurs.