---
title: "Breaking: #92802 - User-database-based authentication timeout field removed"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:breaking-92802"
source: "Changelog/11.0/Breaking-92802-DatabaseBasedAuthenticationTimeoutFieldRemoved.rst"
modified: "2026-09-15T10:46:36+00:00"
---

# Breaking: #92802 - User-database-based authentication timeout field removed

See [forge#92802](https://forge.typo3.org/issues/92802)

## Description

The `AbstractUserAuthentication` object had the possibility to
theoretically use a database field where a session timeout value
for the session storage could be set. This was never implemented but
rather separated into a separate property called `sessionTimeout`.

This functionality, together with the public property
`auth_timeout_field`, has been removed.

## Impact

Setting the property via a custom extension will result in a PHP warning, as
the property does not exist anymore.

In addition, this property is never evaluated anymore when determining the
session timeout.

## Affected Installations

TYPO3 installations that used third-party code to modify the session timeout
value based on a database field, which relied on the public property for
implementation purposes.

## Migration

Use a custom implementation with custom hooks or custom authentication provider
to achieve the same results.