This is the relevant section in Auth.__init__ for the login expiration:

        if auth and auth.last_visit and auth.last_visit + \
                datetime.timedelta(days=0, seconds=auth.expiration) >request
.now:
            self.user = auth.user
            # this is a trick to speed up sessions
            if (request.now - auth.last_visit).seconds > (auth.expiration / 
10):
                auth.last_visit = request.now
        else:
            self.user = None
            if session.auth:
                del session.auth

I have verified that jsonrpc requests will update the last_visit. BUT the 
login will expire anyway (after "expiration", since the original login), 
which I can not understand from the code above.

This does not happen when doing normal accesses: doing periodic requests 
will keep an active login forever, which is expected I think.

Am I missing something here?

Thanks,
Daniel

-- 



Reply via email to