radiuscontroller/Services/RadiusService.cs

@@ -106,14 +106,13 @@ public class RadiusService : IRadiusService
             Value = password
         });
 
-        // Set Session-Timeout (in seconds)
+        // Set Session-Timeout to 60 seconds to force frequent re-authentication (validation)
-        long sessionTimeoutSeconds = (long)config.DefaultSessionTimeMinutes * 60;
         _db.RadReply.Add(new RadReply
         {
             Username = username,
             Attribute = "Session-Timeout",
             Op = "=",
-            Value = sessionTimeoutSeconds.ToString()
+            Value = "60"
         });
 
         // Set Max-Octets (in bytes)
@@ -232,11 +231,11 @@ public class RadiusService : IRadiusService
         profile.SessionTimeMinutes = newSessionTimeMinutes;
         profile.DataLimitMb = newDataLimitMb;
 
-        // Update RadReply Session-Timeout
+        // Ensure Session-Timeout is strictly 60 seconds for frequent validation
         var sessionReply = await _db.RadReply.FirstOrDefaultAsync(rr => rr.Username == profile.Username && rr.Attribute == "Session-Timeout");
         if (sessionReply != null)
         {
-            sessionReply.Value = (newSessionTimeMinutes * 60).ToString();
+            sessionReply.Value = "60";
         }
         else
         {
@@ -245,7 +244,7 @@ public class RadiusService : IRadiusService
                 Username = profile.Username,
                 Attribute = "Session-Timeout",
                 Op = "=",
-                Value = (newSessionTimeMinutes * 60).ToString()
+                Value = "60"
             });
         }