OAM ignores Session Lifetime and disconnects user after Idle Timeout despite of user's activity
We use OAM 12.2.1.4.202201 on RedHat Linux 7. Our session configuration parameter (Session Idle Timeout) for Application domain is set to 0. Session parameters in OAM Console > Configuration > Settings > Common Settings are:
Session Lifetime (minutes) = 10
Idle Timeout (minutes) = 3
For demonstration purposes we use OAM-protected application with 2 JSP pages test1.jsp and test1r.jsp. We switched between them every 20 seconds and the user was redirected to the login page after 3 minutes.
I tested the same scenario with OAM 12.1.2.4 and patches from 2021-01 and it worked fine.
I tested the same scenario with OAM 12.1.2.4 and patches from 2021-07 and it does not work correctly (the same behaviour like with SPB 2022-01).