Configuration

Configuration of sessions

Rails.application.config.session_management = {
  inactivity_timeout: 30.minutes,
  absolute_timeout: 30.days,
  max_concurrent_sessions: 5,
  validate_ip_changes: Rails.env.production?,
  validate_user_agent_changes: false,
  suspicious_activity_action: Rails.env.production? ? :revoke : :log
}