Giters

yourlabs / django-session-security

A little javascript and middleware work together to ensure that the user was active during the past X minutes in any tab he has open. Otherwise, display a warning leaving a couple of minutes to show any kind of activity like moving the mouse. Otherwise, logout the user.

Home Page:http://django-session-security.rtfd.org

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Inconsistent timeout

hmcelroy opened this issue · comments

commented

We have been using django-session-security for about 2 years in our application, but its effectiveness has been spotty.
Sometimes the culprit is a clear interference from another piece of middleware or another change in our application - but currently our experience is that it works "some times". It will work for one user one time, then fail the next.

If i remove the warn/expire settings our application consistently expires the session cookie per the session cookie timeout setting.

Are there any common interfering factors that you can recommend looking into?

commented

In this kind of case I would recommend:

  • collect data,
  • make the issue reproductible,
  • isolate the issue in a sample project or test case.