Summary

Sessions in Bamboo are supposed to have a default inactivity timeout of 30 minutes (see https://confluence.atlassian.com/bamkb/how-to-change-bamboo-user-session-timeout-848977292.html), however regardless of which timeout period is set, sessions never time out if a user doesn't close their browser and leaves open any page in Bamboo, due to the XMLHttpRequest that is sent to /rest/api/latest/server?_=1544203539392 every 30 seconds, which extends the session each time.

Workaround

None known