Sessions and timeouts
Purpose
KCFIS keeps you signed in by storing a short-lived access token and a longer-lived refresh token in your browser. The application refreshes the access token in the background so you can keep working without re-entering your password every few minutes.
What you will notice
- Most of the time, nothing — KCFIS refreshes your session silently.
- Occasionally you may see a brief Verifying session... screen with a teal spinner. This happens when the access token expired and KCFIS is using your refresh token to issue a new one.
- If both tokens have expired or been revoked, KCFIS opens the login page with a Session Expired banner explaining what happened. After you sign in again, KCFIS returns you to the page you were on if it can.
Why a session might expire early
| Cause | What you can do |
|---|---|
| Long idle time | Sign in again. There is no warning before the cutoff. |
| You logged out from another browser/tab | Sign in again. Logging out from one tab logs you out everywhere on that machine. |
| Your administrator revoked your tokens | Sign in again; contact your administrator if your account no longer works. |
| Your password was reset | Sign in with the new password. |
Logging out manually
To end your session immediately:
- Open the sidebar in any KCFIS screen.
- Click Logout at the bottom.
Expected result
KCFIS clears your tokens, shows a "You have been successfully logged out" toast, and returns to the login page.
If the network is unavailable, KCFIS still clears tokens locally and signs you out, but shows a "Logout failed" toast to indicate that the server was not reached. The next sign-in works as usual.
Tips
- Save your work often. During long submission edits, click Save before walking away.
- If you share a workstation with other users, log out at the end of each session.