Why
The IdleDetector API is Chromium-only, needs a permission prompt and a user gesture, and Firefox never shipped it. As the default path it makes behaviour differ per browser.
Proposal
- Make the event-based detector the only default.
- Keep the
IdleDetector API as an opt-in enhancement (screenLock: true) that adds a locked / unlocked signal when available, and is silently absent otherwise.
- Document that it never replaces server-side expiry.
Why
The
IdleDetectorAPI is Chromium-only, needs a permission prompt and a user gesture, and Firefox never shipped it. As the default path it makes behaviour differ per browser.Proposal
IdleDetectorAPI as an opt-in enhancement (screenLock: true) that adds alocked/unlockedsignal when available, and is silently absent otherwise.