[keycloak-user] XHRs resulting in 401 unauthorized

Hi All, We have a problem in our platform configuration: Server 1: Apache 2.4.x mod_auth_openidc 2.3.11 Symfony 3.x application + Javascript & Ajax code (no headers into our xhr requests) Server 2: Keycloack 4.8.3 Final (client is confidential type) All work fine but after few minutes (about 4 minutes) any requests (XHRs)fails with error 401 unauthorized into browser. To bypass the error, we added this parameter into ssl.conf (attached file): OIDCSessionInactivityTimeout 1800 But we would find a definitive solution. We googled about this problem: https://github.com/zmartzone/mod_auth_openidc/wiki/Cookies https://github.com/zmartzone/mod_auth_openidc/wiki/Access-Tokens-and-Refr... but we not found anything help us. We missed something? Comments and suggestions are welcome. Bests Gianluca Diodato