UI: Show token expiring warning

[hashishaw]

This PR addresses #20859

Currently, when a token is going to expire due to inactivity* we show a message in the user menu dropdown. However, that is not very discoverable and we should also alert the user if their token is set to expire in the main page.

This PR adds a dismissable banner if we know the token is going to expire. Clicking "Renew token" will renew the token and restart the inactivity timeout clock.

There is one limitation to this approach, which is we currently don't know if the token is at its max TTL. This should be follow-on work to show a similar message of the token will fail on the next refresh request.

*inactivity in the UI is defined as a lack of API requests. A user could be filling out a very long form, for example, and if there are no API requests (other than health and seal-status which don't count) for 3 min the user will be logged out next time the token expiration time is passed. If there are requests in that time, the UI will automatically refresh the token instead.

Replication steps

vault auth enable userpass                
vault auth tune -listing-visibility="unauth" -default-lease-ttl=6m -max-lease-ttl=15m userpass
vault write auth/userpass/users/bob password=mysecurepw 

Log into UI and don't click anything or change pages. The banner should show up after about 3 minutes

[github-actions]

Build Results:
All builds succeeded! ✅

[github-actions]

CI Results:
All Go tests succeeded! ✅

[kiannaquach]

Thanks for tackling this Chelsea!! 🎉

[glisav]

Hello @hashishaw
I just had a question regarding this; if no activity after certain minutes (I think around 3 minutes) this notification will be displayed. But does it log out the user? Or it will continue to stay logged in until token expiration (if the token is not renewed anymore because of no activity) ? So, the question is: does the session terminate if no user activity?
Thanks,
Glisav

[hellobontempo]

Hi @glisav - thank you for the question! User's are not automatically logged out due to inactivity (and you're right, inactive is 3 minutes of no user action)

This banner is to inform users the token auto-renewal the UI performs behind the scenes has stopped. If a token is renewable, the UI auto renews the lease halfway through the token's ttl. So if a token has a ttl of 4 hours the UI auto-renews the token after being logged in for 2 hours.

The UI stops this auto-renew process if a user is inactive. This allows the token to expire, which then will log the user out when the token expires. (To avoid expiration, user activity must resume or the token must be manually renewed)

[glisav]

Hi @hellobontempo
Thank you for your reply :)

[glisav]

@hashishaw is this inactivity time of 3 minutes configurable in Helm chart? I want to extend inactivity time and to make this banner appear after 15 minutes.

[hashishaw]

@glisav no, it's not currently configurable. However, we're currently tracking requests to configure it for future feature work, so I'll add your ask to that ticket. Thanks for the feedback!