#8452: expire time in session being updated frequently
-------------------------------------+--------------------------------------
 Reporter:  TP                       |       Owner:  nobody     
   Status:  new                      |   Milestone:             
Component:  django.contrib.sessions  |     Version:  1.0-alpha-2
 Keywords:                           |       Stage:  Unreviewed 
Has_patch:  0                        |  
-------------------------------------+--------------------------------------
 We noticed that one of our user's session info in django_session has it's
 expire date moved into the future periodically. We are not calling
 set_expiry() on the session. My understanding was that the expire date was
 a constant for a given session key -- it is set when the session is
 created and never changes unless set_expiry() is called.

 While reading through the Django Sessions docs, though, I noticed this
 bit:

 {{{
 To change this default behavior, set the SESSION_SAVE_EVERY_REQUEST
 setting to True. If SESSION_SAVE_EVERY_REQUEST is True, Django will save
 the session to the database on every single request.

 Note that the session cookie is only sent when a session has been created
 or modified. If SESSION_SAVE_EVERY_REQUEST is True, the session cookie
 will be sent on every request.

 Similarly, the expires part of a session cookie is updated each time the
 session cookie is sent.
 }}}

 Does this mean that the cookie is sent whenever the session data changes
 and that this triggers the expiration date to move forward? If so, why is
 that? It seems that's the wrong behavior since I would think the
 expiration of someone's remembered login etc would have nothing to do with
 when the session data was last updated.

-- 
Ticket URL: <http://code.djangoproject.com/ticket/8452>
Django Code <http://code.djangoproject.com/>
The web framework for perfectionists with deadlines
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to