April 2026 Updates

April 8, 2026

Inactivity Logouts

The main feature of this release is Inactivity Logouts, which allow user sessions to be proactively terminated if no user activity is detected.

This can be configured via a new configuration option. In addition, an idle_expires_at timestamp is now returned by the /sessions/validate endpoint, allowing frontends to react to upcoming idle logouts accordingly.

Beyond that, we updated a number of dependencies and included several small bug fixes.