Merge pull request #10035 from WimJongeneel/ufc/1746-document-auth-token-timeout

Document authtoken timeout setting

Author: MarkvanMents

content/en/docs/refguide/runtime/custom-settings/_index.md

@@ -272,7 +272,8 @@ The settings below influence the behavior of the Mendix web client.
 | Name | Description | Default Value |
 | --- | --- | --- |
 | <a id="EnableKeepAlive" href="#EnableKeepAlive">EnableKeepAlive</a> | Defines whether the web client sends a keep alive request every SessionTimeout/2 milliseconds, to prevent a session timeout. Each click in the browser also acts as KeepAlive. Disabling this property will result in a user being logged out automatically after 10 minutes of inactivity, even if the browser remains open. | true |
-| <a id="commendixwebuiHybridAppLoginTimeOut" href="#commendixwebuiHybridAppLoginTimeOut">com.<wbr>mendix.<wbr>webui.<wbr>HybridAppLoginTimeOut</a> | Determines how many minutes your token will remain valid before re-authenticating using your full credentials.  If no value is set, the token will expire after One year. |  |
+| <a id="commendixwebuiAuthTokenTimeout" href="#commendixwebuiAuthTokenTimeout">com.<wbr>mendix.<wbr>webui.<wbr>AuthTokenTimeout</a> | Determines how many minutes your token will remain valid before re-authenticating using your full credentials.  If no value is set, the token will expire after One year. | Introduced in Mendix 11.3. Use [com.<wbr>mendix.<wbr>webui.<wbr>HybridAppLoginTimeOut](#commendixwebuiHybridAppLoginTimeOut) in earlier versions. |
+| <a id="commendixwebuiHybridAppLoginTimeOut" href="#commendixwebuiHybridAppLoginTimeOut">com.<wbr>mendix.<wbr>webui.<wbr>HybridAppLoginTimeOut</a> | Legacy alias of <a id="commendixwebuiAuthTokenTimeout" href="#commendixwebuiAuthTokenTimeout">com.<wbr>mendix.<wbr>webui.<wbr>AuthTokenTimeout</a> |  |
 | <a id="commendixwebuiFeedbackSizeWarningThreshold" href="#commendixwebuiFeedbackSizeWarningThreshold">com.<wbr>mendix.<wbr>webui.<wbr>FeedbackSizeWarningThreshold</a> | A warning is logged when the feedback size exceeds the threshold. Feedback is sent from server to client to instruct (for example, to refresh objects or to open a page). They are serialized as "instructions" in the server response. If there are too many instructions, this can have performance implications, as they all have to be serialized to the client. For this reason, a warning is logged when the threshold is exceeded. | 5000 |
 | <a id="commendixwebuiStateSizeWarningThreshold" href="#commendixwebuiStateSizeWarningThreshold">com.<wbr>mendix.<wbr>webui.<wbr>StateSizeWarningThreshold</a> | A warning is logged when the state size exceeds the threshold. The state consists of changes in objects and of objects not committed to the database (yet). If there is too much state, this will have performance implications, as the whole state has to be serialized to the client. For this reason, a warning is logged when the threshold is exceeded. | 100 |
 | <a id="commendixwebuiCommittedObjectsThreshold" href="#commendixwebuiCommittedObjectsThreshold">com.<wbr>mendix.<wbr>webui.<wbr>CommittedObjectsThreshold</a> | The threshold controls how much data is sent back to the client after executing a microflow. By default, we send back full objects when they are changed or committed. When this threshold is reached, only object GUIDs are sent back instead so that the client knows about the changes while the amount of data sent over the network is reduced. The client will then retrieve the objects later on, if needed. | 100 |

content/en/docs/refguide/runtime/session-management.md

@@ -45,7 +45,7 @@ You can use authentication in both online and offline apps to remember the end-u
 
 ### Authentication Token Expiry
 
-There is a custom runtime setting, [`com.mendix.webui.HybridAppLoginTimeOut`](/refguide/custom-settings/#commendixwebuiHybridAppLoginTimeOut) that determines how long the authentication token is valid for. If no value is set, the token remains valid for one year.
+There is a custom runtime setting, [`com.mendix.webui.AuthTokenTimeout`](/refguide/custom-settings/#commendixwebuiAuthTokenTimeout) that determines how long the authentication token is valid for. If no value is set, the token remains valid for one year. Prior to Mendix 11.3, use the legacy runtime setting [`com.mendix.webui.HybridAppLoginTimeOut`](/refguide/custom-settings/#commendixwebuiHybridAppLoginTimeOut) instead.
 
 ## Application Behavior