---
title: "Breaking: #68890 - Remove dual-use of auth_timeout_field in AbstractUserAuthentication"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:breaking-68890"
source: "Changelog/8.0/Breaking-68890-RemoveDualuseOfAuthTimeoutField.rst"
modified: "2026-09-15T10:46:36+00:00"
---

# Breaking: #68890 - Remove dual-use of auth_timeout_field in AbstractUserAuthentication

See [forge#68890](https://forge.typo3.org/issues/68890)

## Description

In `AbstractUserAuthentication` class the property `auth_timeout_field` could
previously either contain the name of a field or a timeout-value in seconds. To
specify a field name the property can be used as before.
To specify a timeout-value, a new property called `sessionTimeout` is introduced
that can be set to an integer >= 0.

## Impact

If some extension reads the value, the default is changed from an integer (0) to an empty string.

## Migration

Extensions modifying `auth_timeout_field` to a numeric value should switch to using `sessionTimeout`.