Sign-in security

The contract

Takes a login attempt. Returns signed in, asked for a second step, or refused.

Name	What it does
idleTimeout	How long a person may be quiet before they are signed out. Defaults to 30 minutes.
idleWarning	How long before the idle sign-out the person is warned. Defaults to 2 minutes.
protectedTables	The app's own tables a session that owes its code may not touch, each given the policy with one line in the app's own migration.
idleMarkKey	The storage key that remembers an idle sign-out.

Choose a set-up and sign in. This runs the same code your app would run, against a sign-in service that lives in this page.

An app signs a person out after 30 minutes with no activity and warns 2 minutes before. This demo uses 20 seconds and warns after 10.

Not started.