Google session timeout - session killed after a few minutes inactivity

[mailblue-info]

Hi,

I'm trying to get mod_auth_openidc up with Google Workspace SSO. I've managed to store the session that when a browser is closed and re-opened the session is still there. But I'm having issues with the timeout.

I've a simple PHP page that displays the headers and it showed that the unix timeout time is around 1 hour. But if I refresh after 5-10 minutes the browser re-directs me back to Google to re-authenticate.

Is there some settings that I'm using incorrectly that causes this issue?

OIDCClientID [xxx]
OIDCClientSecret [xxx]

# OIDCRedirectURI is a vanity URL that must point to a path protected by this module but must NOT point to any content
OIDCRedirectURI https:///dashboard/
OIDCCryptoPassphrase []
OIDCScope "openid email profile"
OIDCSessionType server-cache:persistent
OIDCSessionCacheFallbackToCookie On
OIDCSessionInactivityTimeout 9000

<Location />
   AuthType openid-connect
   Require valid-user
</Location>

The headers returned:

    [OIDC_CLAIM_sub] => [id]
    [OIDC_CLAIM_name] => [full name]
    [OIDC_CLAIM_given_name] => [firstname]
    [OIDC_CLAIM_family_name] => [lasname]
    [OIDC_CLAIM_picture] => [my face]
    [OIDC_CLAIM_email] => [email]
    [OIDC_CLAIM_email_verified] => 1
    [OIDC_CLAIM_locale] => nl
    [OIDC_CLAIM_hd] => [domain]
    [OIDC_CLAIM_iss] => https://accounts.google.com
    [OIDC_CLAIM_azp] => [azp]
    [OIDC_CLAIM_aud] => [aud]
    [OIDC_CLAIM_at_hash] => [hash]
    [OIDC_CLAIM_nonce] => [nince]
    [OIDC_CLAIM_iat] => 1701358473
    [OIDC_CLAIM_exp] => 1701362073
    [OIDC_access_token] => [token]
    [OIDC_access_token_expires] => 1701362072

[zandbelt]

the OIDCSessionInactivityTimeout should cover this; the server debug logs at the time of the event will reflect what is happening and why