# Web dev sign in cookie

**URL:** <https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223>\
**Category:** Ignition\
**Created:** [March 8, 2021, 3:41pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223 "2021-03-08T15:41:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [March 8, 2021, 3:41pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/1 "2021-03-08T15:41:27Z")

</div>

I have a mobile website developed using web-dev. Is there any way to control how long the session stays logged in? It seems to be somewhat erratic, but seems to mostly default to being much shorter than what I would like. Is there anything we can do to keep logins active for a longer period of time? What happens alot of the time is a user logs in, looks at something, then sticks phone back in pocket. 10 mins later they pull phone out and they have to log in again. Would be nice ot be able to say stay logged in for 8 hours or something.

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [March 9, 2021, 10:03pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/2 "2021-03-09T22:03:41Z")

</div>

bump, anyone run into this issue?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 9, 2021, 10:26pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/3 "2021-03-09T22:26:11Z")

</div>

If you’re using Webdev’s built in authentication, then it’s just piggybacking on the gateway’s session management. As of 8.1.1, there’s a ‘User Inactivity Timeout’ setting exposed in Configure -\> Security - that might be worth a try?

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [March 10, 2021, 12:37am UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/4 "2021-03-10T00:37:06Z")

</div>

what about in older versions? Is that something that can be accessed somewhere in a file or something? I am slated to upgrade soon but am not 100% ready yet.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 10, 2021, 3:21pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/5 "2021-03-10T15:21:59Z")

</div>

You might be able to manually configure something in Jetty, via the web.xml, but there’s no supported way to do so.

---

<div class="post-metadata">

**Author:** ![diat150](https://avatars.discourse-cdn.com/v4/letter/d/a587f6/32.png) [@diat150](https://forum.inductiveautomation.com/u/diat150)\
**Post date:** [March 10, 2021, 4:36pm UTC](https://forum.inductiveautomation.com/t/web-dev-sign-in-cookie/44223/6 "2021-03-10T16:36:02Z")

</div>

I see this in the webdefault.xml setting under Ignition\>Webserver. Is this the file you were talking about?

```auto
  <session-config>
    <session-timeout>30</session-timeout>
  </session-config>

```