Changing Shopware's session expiration

The precise path for the file you need to change may be like:

/var/www/shopware/vendor/shopware/administration/Resources/app/administration/src/core/service/login.service.ts

If you wish to change the timeout, you need to edit the lastActivityOverThreshold method. Change the threshold from 1500 to 3000 to increase the expiry time to an hour.

Excluded exceptions erroneously logged

In addition to OAuth exception log spam, it appears the shopware.logger.exclude_exception setting in shopware.yaml suddenly stopped working. As I discussed here previously, we can use this setting to exclude certain irrelevant and repetitive exceptions from being logged in our log files. Very important if you want to prevent filling up disk space with redundant HTTP errors or OAuthServerException messages. E.g:

League\OAuth2\Server\Exception\OAuthServerException: "The resource owner or authorization server denied the request."...

Until I figure out why it's no longer possible for us to exclude exceptions in shopware.yaml, I decided to apply a temporary hack(ish) fix to the file:

/var/www/shopware/vendor/league/oauth2-server/src/Exception/OAuthServerException.php

Ca at line 243, in the accessDenied method, you can insert http_response_code(401);exit(); instead of throwing the exception in order to prevent log spam. However, I still managed to discover the following:

1. shopware.yaml still has the exclude_exception section. This probably means it should work.
2. The ExcludeExceptionHandler that seem to handle this code IS included when I var_dump the $classLoader variable from index.php.

E.g. This file should handle the excluded exceptions:

/srv/shopware/vendor/shopware/core/Framework/Log/Monolog/ExcludeExceptionHandler.php

However, trying to var_dump the $excludeExceptionList from this file seem to do nothing. Not sure how to check if the variable is actually populated at this point. The good thing is that there is some recent activity in GitHub on this code, so it does not seem the feature has been removed. It's probably just a bug that will be fixed sooner or later.

So far, I have been unable to pinpoint why this happens. I am planning to try pulling from GitHub and perhaps testing a fresh installation of 6.4.18.1 in Docker, but not sure I will get the time, as I will probably have to do this in my own free time.

Links

1. NEXT-25810: exclude_exception in shopware.yaml not working - Shopware Issuetracker
2. shopware.logger.exclude_exception - exceptions still being logged - GitHub

Tell us what you think: