# Log out from node red flow

**URL:** https://discourse.nodered.org/t/log-out-from-node-red-flow/18729
**Category:** General
**Created:** [3 December 2019 09:30 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729 "2019-12-03T09:30:24Z")
**Posts on this page:** 17
**Page:** 1

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [3 December 2019 09:30 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/1 "2019-12-03T09:30:24Z")

</div>

Hi there I want to set time for logging out from node red flow automatically after some seconds.

and  
How can i set that after every boot node red prompt for user login?

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [4 December 2019 11:32 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/2 "2019-12-04T11:32:59Z")

</div>

Not really clear what you are asking. Do you mean from the Node-RED Editor or from some user-facing UI?

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 10:41 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/3 "2019-12-05T10:41:27Z")

</div>

Yes I want to secure node red , for that i have set user authentication. but It is always logged.

How can i configure that

> "after some time it will logout and also after rebooting it will first prompt user login."

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [5 December 2019 10:45 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/4 "2019-12-05T10:45:34Z")

</div>

There are two web servers built in to Node-RED. One for administration (including the editor) and one for user interactions. Each has separate security, which do you want to secure?

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [5 December 2019 10:48 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/5 "2019-12-05T10:48:43Z")

</div>

Hi @pranavthakkar,

you can use `sessionExpiryTime` in your `adminAuth` settings object to set the session expiry time in seconds. The default is 1 week (604800).

There is no option available to automatically log out when they close their browser window. If you wanted to do it on reboot of the Pi, then you could write a script that deletes the file `~/.node-red/.sessions.json` before starting Node-RED.

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 11:00 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/6 "2019-12-05T11:00:36Z")

</div>

what about the flow in node red will it also delete?

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 11:00 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/7 "2019-12-05T11:00:55Z")

</div>

Yes I want to secure the editor and UI

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [5 December 2019 11:11 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/8 "2019-12-05T11:11:30Z")

</div>

> [@pranavthakkar](#):
>
> what about the flow in node red will it also delete?

The `.sessions.json` file only contains the active session tokens. If you delete the file then you effectively log everyone out - although that only works if you restart Node-RED so it reloads the file.

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 11:28 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/9 "2019-12-05T11:28:49Z")

</div>

so what kind of script do i need to write?

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [5 December 2019 11:29 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/10 "2019-12-05T11:29:34Z")

</div>

A script to delete that file.

`rm ~/.node-red/.sessions.json`

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 11:30 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/11 "2019-12-05T11:30:36Z")

</div>

I'm if power goes off does it go log out?

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [5 December 2019 11:32 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/12 "2019-12-05T11:32:18Z")

</div>

@pranavthakkar if you create a script that deletes the session file whenever your device starts, then it doesn't matter what cause it to restart.

---

<div class="post-metadata">

### Author: ![pranavthakkar](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@pranavthakkar](https://discourse.nodered.org/u/pranavthakkar)
#### Post date: [5 December 2019 11:34 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/13 "2019-12-05T11:34:52Z")

</div>

Yes, I got that! My question was

> [@knolleary](#):
>
> rm ~/.node-red/.sessions.json

this is not script. and I don't know how to write scripts in Rpi.

So how can i make it in to script. Any suggestion.

---

<div class="post-metadata">

### Author: ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [5 December 2019 11:39 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/14 "2019-12-05T11:39:06Z")

</div>

Lots of guides for that online. For example: [https://raspberrypi.stackexchange.com/questions/8734/execute-script-on-start-up](https://raspberrypi.stackexchange.com/questions/8734/execute-script-on-start-up)

---

<div class="post-metadata">

### Author: ![ffich](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ffich/32/27292_2.png) [@ffich](https://discourse.nodered.org/u/ffich)
#### Post date: [1 November 2021 13:06 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/15 "2021-11-01T13:06:44Z")

</div>

Hi @TotallyInformation,  
concerning this I've successfully used the sessionExpiryTime option for the administration interface, while I was not able to do the same with the UI. Is there a way to control the token expiration of UI as well?

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [1 November 2021 13:20 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/16 "2021-11-01T13:20:28Z")

</div>

Please raise as a new thread as it will be more likely to get more responses.

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [1 November 2021 13:20 UTC](https://discourse.nodered.org/t/log-out-from-node-red-flow/18729/17 "2021-11-01T13:20:37Z")

</div>


