.. include:: /Includes.rst.txt

.. _breaking-68890:

=======================================================================================
Breaking: #68890 - Remove dual-use of auth_timeout_field in AbstractUserAuthentication
=======================================================================================

See :issue:`68890`

Description
===========

In `AbstractUserAuthentication` class the property `auth_timeout_field` could
previously either contain the name of a field or a timeout-value in seconds. To
specify a field name the property can be used as before.
To specify a timeout-value, a new property called `sessionTimeout` is introduced
that can be set to an integer >= 0.


Impact
======

If some extension reads the value, the default is changed from an integer (0) to an empty string.


Migration
=========

Extensions modifying `auth_timeout_field` to a numeric value should switch to using `sessionTimeout`.

.. index:: PHP-API