SP18 is indeed the service pack that is running (checked productinfo, System Overview, and /libs/system). Removing SP12 from /libs/system does not work.  However, I can remove the package either through crx-de (/etc/packages/adobe/cq650/servicepack) or package manager UI (Select SP18 package, then M...

This is what I am hoping to avoid. I suppose if I save the text, delete the existing fragment based on template, then create a new one based on model with same name, I would not have to update the reference within the pages themselves.  Still a lot of work.

Yes or whether that is necessary.

But the simple fragments should continue to work in future versions, correct?

We have hundreds of content fragments based on templates (mainly the Simple Fragment).  They are referenced on hundreds of pages.  As we create new fragments, we are basing them on models.  However, is it necessary to covert all the existing fragments to use a content fragment model instead of Simpl...

I've come a long way in understanding session management in AEM since my post so I'll share what I learned. I should have stated this in my first post, that our requirement is to be able to set a session idle timeout (the user lets their browser sit for X minutes and then they are logged out) and a ...

I think that sets the expiration of the token within the response of the call to /libs/granite/csrf/token.json.  For example: {"token":"jsueUWBDOjE2NzgzODYyOTMsImlhdCI6MTY38DE34TY5M30.jdEhcW3JBPvdCyDOxfFM938EucIvIhKNF6VkeHmP5g"}   I don't think it's related to session or login token expiration.

I am setting the session timeout to 15 minutes (via the Apache Felix Jetty Based Http Service configuration).  However, the call to /libs/granite/csrf/token.json every 5 minutes seems to be keeping it active.  Should I adjust how often token.json is called?