Session timeout terminates session early

[ryanhofdotgov]

What did you do?

Login, accept terms, don't on anything except maybe: navigation menu expand/close, instructions. Don't click on Next or click onto a sub-section page. Wait 1-2 minutes.

What did you expect to see?

No logout until the 15 minute session timeout.

What did you see instead?

Logout.

Additional Information

tick() in TimeoutWarning.jsx does a check against props.lastRefresh the first time it is called, which if you don't change routes by navigation to a page, will be null (evaluated to 0), due to defaultProps of TimeoutWarning – set on initial page load. This incorrectly makes the diff >= to timeout.

To correct, I believe lastRefresh needs to be set to the current time after the first successful login.