About session timeout and remember me default values

[Stefano Coletta]

Currently, among all Atlassian products I'm using I've noticed that there are different timeout values defaults regarding authentication and "Remember me" feature.

Application	Authentication Timeout	Remember me Timeout
JIRA	300 mins (5h)	2 weeks
Confluence	60 mins (1h)	2 weeks
Bitbucket	30 mins	4 weeks
Bamboo	30 mins	2 weeks

Why not making them equal?

I would like to discuss/know the rationale behind these differences and if it is the case to align them all or leaving them unchanged or just make some changes.

Since the differences are big I was wondering why they are so different.

[Nate Moseley]

An additional note that further confuses things, 2147483 is apparently the max (seconds) remember me timeout in JIRA, and anything above that value causes NullPointerExceptions. So setting consistent values across the different services is not intuitive. https://jira.atlassian.com/browse/JRASERVER-25985

[Stefano Coletta]

2147483 seconds are about 3,5 weeks, that is why JIRA remember me is set to 2 weeks! From what you discovered, you can't set it to 4 weeks to align with Bitbucket for example... so maybe we can raise it to 3 weeks and lower down the Bitbucket one to 3 weeks also...