Currently, the session timeout option (search session-timeout), controlling when session entities are removed after XXX min of inactivity, seems to be completely ignored.

It is set to 10.000 minutes, hard-coded in built-in.app:

function internalCleanupSessionManagerEntities(){
    var sessiontimeout := 10000; //minutes
    var n : DateTime := now().addMinutes(-1*(sessiontimeout));
    var ses := from SessionManager as sc where sc.lastUse is null or sc.lastUse < ~n limit 25; //use limit to avoid loading all obsolete entities in one transaction
    for(s : SessionManager in ses){
      s.delete();
    }
}

Submitted by Elmer van Chastelet on 22 March 2013 at 13:04