use namespace::clean -except => 'meta';
-our $VERSION = '0.34';
+our $VERSION = '0.37';
$VERSION = eval $VERSION;
my @session_data_accessors; # used in delete_session
expires => 7200,
verify_address => 0,
verify_user_agent => 0,
+ expiry_threshold => 0,
%$cfg,
);
sub finalize_headers {
my $c = shift;
- # Force extension of session_expires before finalizing headers, so a possible cookie will be
- # up to date. First call to session_expires will extend the expiry, subsequent calls will
+ # fix cookie before we send headers
+ $c->_save_session_expires;
+
+ # Force extension of session_expires before finalizing headers, so a pos
+ # up to date. First call to session_expires will extend the expiry, subs
# just return the previously extended value.
$c->session_expires;
$c->maybe::next::method(@_);
- $c->_save_session_expires;
$c->_save_session_id;
$c->_save_session;
$c->_save_flash;
my $c = shift;
if ( defined($c->_session_expires) ) {
- my $expires = $c->session_expires; # force extension
- my $sid = $c->sessionid;
- $c->store_session_data( "expires:$sid" => $expires );
+ my $threshold = $c->_session_plugin_config->{expiry_threshold} || 0;
+
+ if ( my $sid = $c->sessionid ) {
+ my $cutoff = ( $c->get_session_data("expires:$sid") || 0 ) - $threshold;
+
+ if (!$threshold || $cutoff <= time) {
+
+ my $expires = $c->session_expires; # force extension
+ $c->store_session_data( "expires:$sid" => $expires );
+
+ }
+
+ }
+
}
}
$c->change_session_expires( 4000 );
+Note that this only works to set the session longer than the config setting.
+
=back
=head1 INTERNAL METHODS
=item set_session_id
+=item initial_session_expires
+
=back
=head1 USING SESSIONS DURING PREPARE
The time-to-live of each session, expressed in seconds. Defaults to 7200 (two
hours).
+=item expiry_threshold
+
+The time (in seconds) before the session expiration to update the
+expiration time (and thus the session).
+
+The purpose of this is to keep the session store from being updated
+when nothing else in the session is updated.
+
+Defaults to 0 (in which case, the expiration will always be updated).
+
=item verify_address
-When true, C<<$c->request->address>> will be checked at prepare time. If it is
+When true, C<< $c->request->address >> will be checked at prepare time. If it is
not the same as the address that initiated the session, the session is deleted.
Defaults to false.
=item verify_user_agent
-When true, C<<$c->request->user_agent>> will be checked at prepare time. If it
+When true, C<< $c->request->user_agent >> will be checked at prepare time. If it
is not the same as the user agent that initiated the session, the session is
deleted.