Feature request - Add Option for Auto Logout After a Set Time (e.g., 24 Hours)

[ahmedraza52]

Hi,

It would be great if Magic Login could include an option to automatically log out a user session after a specified amount of time (e.g., 24 or 48 hours). This would enhance session management and security, similar to how platforms like WordPress expire sessions after a certain period or certain period of inactivity.

I know we can do this by adding the code. https://handyplugins.co/docs/magic-login-session-duration/

But It would be good if we have Option in the setting of the plugin.

Suggested Feature:

• A configurable setting to auto-expire user sessions after a set duration.

• Example durations: 24 hours (default), customizable via config/env.

• Optionally, allow users to re-authenticate via magic link again after session expiration.

Why It’s Useful:

• Improves security for inactive or long-abandoned sessions.

[mustafauysal]

Hi @ahmedraza52,

Thanks for the suggestion! Magic Login uses the same WordPress core function to set authentication cookies, so session duration works just like a standard WordPress login.

I'm not sure adding this as a built-in option is the right fit for the plugin at this time, since WordPress already handles it natively. If we were to introduce such a feature, it would likely apply only to Magic Login requests to avoid interfering with WordPress’s default behavior. 🤔

Optionally, allow users to re-authenticate via magic link again after session expiration.

This isn’t something I plan to implement. Tracking individual users' authentication expiration would be overengineering. If you need to log in again, simply request a new magic link.

[ahmedraza52]

Thank you for your detailed response! I understand your point about keeping the functionality in line with WordPress’s core. Since I'm using the Magic Login plugin with SupportCandy for a ticketing-based support portal, the need for a session duration (like 48 hours of inactivity) is specific to the nature of my use case, rather than wp-admin login.

I believe adding a session duration option specifically for users of the Magic Login plugin could be very beneficial for those of us using Magic Login for custom portals like mine. I’d be happy to discuss more if you'd like, as I feel this could improve the experience for users with similar needs.