On Mon, 2009-03-16 at 12:36 -0700, Huuuze wrote:
> I would like to audit when a user has experienced an idle timeout in
> my Django application. In other words, if the user's session cookie's
> expiration date exceeds the SESSION_COOKIE_AGE found in settings.py,
> the user is redirected to the login page. When that occurs, an audit
> should also occur.
> 
> Currently, I have configured some middleware to capture these events.
> Unfortunately, Django generates a new cookie when the user is
> redirected to the login page, so I cannot determine if the user was
> taken to the login page via an idle timeout or some other event.
> 
> From what I can tell, I would need to work with the "django_session"
> table. However, the records in this table cannot be associated with
> that user because the sessionid value in the cookie is reset when the
> redirect occurs.

The fundamental problem you're facing here is that the browser won't
send the cookie once it's expired. So Django has no way of knowing the
information you're after.

Regards,
Malcolm



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to