Hi LiteLLM team,

I’m currently evaluating LiteLLM dashboard authentication/session behavior and wanted to ask about support for idle session timeout.

From what I observed:

* The dashboard login uses a session cookie (`Set-Cookie: token=...`) * The cookie currently does not include `Expires` or `Max-Age` * The JWT payload also does not contain an `exp` claim * Closing the browser ends the session, which suggests browser-session-based auth

I understand LiteLLM may already support configuring UI session duration / persistent login lifetime, but I’m specifically looking for idle session timeout behavior.

Example:

* User logs into the LiteLLM dashboard * If there is no activity for 15–30 minutes, automatically log the user out * If the user remains active, the session continues (sliding session / inactivity timeout)

Questions:

1. Is idle session timeout currently supported? 2. If not, is there any recommended approach/workaround? 3. Are there plans to support sliding session expiration / inactivity-based logout in the future?

Thank you!