[MP2][QUESTION]Session and inactivity

2008-02-06 Thread titetluc titetluc
Hello mod_perl users, I am developing a mod_perl module (MyModule) to manage sessions/authentication. This module: - uses Apache::Session to store session-related information - is cookie-based - manages session inactivity This module could be used in the following example. PerlAu

Re: [MP2][QUESTION]Session and inactivity

2008-02-06 Thread Torsten Foertsch
On Wed 06 Feb 2008, titetluc titetluc wrote: > The module I am developing has to delete the cookie if it is not refreshed > regularly. > The question: how can I manage this timeout inactivity ? > The best solution would be to use a mechanism where callbacks (deleting the > cookie rfom the database)

Re: [MP2][QUESTION]Session and inactivity

2008-02-06 Thread titetluc titetluc
Oups I answered directly to Torsten by error Here is my answer and the reply 2008/2/6, Torsten Foertsch <[EMAIL PROTECTED]>: > > On Wed 06 Feb 2008, titetluc titetluc wrote: > > The module I am developing has to delete the cookie if it is not > refreshed > > regularly. > > The question: how can I

Re: [MP2][QUESTION]Session and inactivity

2008-02-07 Thread Perrin Harkins
On Feb 7, 2008 11:09 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > I am using the Apache::Session module to manage ... sessions. > Apache::Session does not manage session expiration Sure, it's a building block. You build the expiration part on top of it. Either you use a timestamp column i

Re: [MP2][QUESTION]Session and inactivity

2008-02-07 Thread titetluc titetluc
Hello all, 2008/2/6, titetluc titetluc <[EMAIL PROTECTED]>: > > Oups > I answered directly to Torsten by error > Here is my answer and the reply > > 2008/2/6, Torsten Foertsch <[EMAIL PROTECTED]>: > > > > On Wed 06 Feb 2008, titetluc titetluc wrote: > > > The module I am developing has to delete

Re: [MP2][QUESTION]Session and inactivity

2008-02-08 Thread Jonathan Vanasco
On Feb 7, 2008, at 2:41 PM, Perrin Harkins wrote: Sure, it's a building block. You build the expiration part on top of it. Either you use a timestamp column in your database or you update a timestamp in the session data. Then you check that to see if too much time has passed. You can certai

Re: [MP2][QUESTION]Session and inactivity

2008-02-11 Thread Perrin Harkins
On Feb 11, 2008 11:10 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > From your previous answers, I conclude that there is no way to suppress a > session automagically by using the mod_perl API (unless using XS to > implement a "monitor" hook -proposed in Apache 2.2 native API by Torsten). Sess

Re: [MP2][QUESTION]Session and inactivity

2008-02-11 Thread titetluc titetluc
2008/2/8, Jonathan Vanasco <[EMAIL PROTECTED]>: > > > On Feb 7, 2008, at 2:41 PM, Perrin Harkins wrote: > > > Sure, it's a building block. You build the expiration part on top of > > it. Either you use a timestamp column in your database or you update > > a timestamp in the session data. Then yo

Re: [MP2][QUESTION]Session and inactivity

2008-02-12 Thread titetluc titetluc
2008/2/11, Perrin Harkins <[EMAIL PROTECTED]>: > > On Feb 11, 2008 11:10 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > > From your previous answers, I conclude that there is no way to suppress > a > > session automagically by using the mod_perl API (unless using XS to > > implement a "monitor"

Re: [MP2][QUESTION]Session and inactivity

2008-02-13 Thread André Warnier
titetluc titetluc wrote: OK, pooling is maybe a franglais (mix of French and English) term By pooling, I mean the fact that expired sessionS have to be REGULARLY purge (in opposed to a callback mechanism (IMHO, the best solution ). This callback would be called on ONE session expiration and

Re: [MP2][QUESTION]Session and inactivity

2008-02-13 Thread Perrin Harkins
On Feb 13, 2008 2:03 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > By pooling, I mean the fact that expired sessionS have to be REGULARLY purge > (in opposed to a callback mechanism (IMHO, the best solution ). This > callback would be called on ONE session expiration and would suppress it. >

Re: [MP2][QUESTION]Session and inactivity

2008-02-13 Thread titetluc titetluc
2008/2/13, Perrin Harkins <[EMAIL PROTECTED]>: > > On Feb 13, 2008 2:03 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > > By pooling, I mean the fact that expired sessionS have to be REGULARLY > purge > > (in opposed to a callback mechanism (IMHO, the best solution ). This > > callback would be

Re: [MP2][QUESTION]Session and inactivity

2008-02-14 Thread Perrin Harkins
On Thu, Feb 14, 2008 at 2:01 AM, titetluc titetluc <[EMAIL PROTECTED]> wrote: > All of these modules propose an expiration mechanism, but they do not > propose a mechanism to automatically destroy session at expiration (this is > what I call a "callback" mechanism). > This implies that the session

Re: [MP2][QUESTION]Session and inactivity

2008-02-14 Thread Jonathan Vanasco
On Feb 14, 2008, at 2:01 AM, titetluc titetluc wrote: There were multiple suggestions that worked through the sort of callback solution you describe: mod_auth_tkt, CHI, storing a timestamp in the session (as opposed to in a separate column in the sessions database table), Apache::SessionManager.