ring.middleware.session-timeout — ring/ring-session-timeout 0.2.0

Middleware for managing session timeouts.

wrap-absolute-session-timeout clj

(wrap-absolute-session-timeout handler options)

Middleware that times out sessions after a specified number of seconds, regardless of whether the session is being used or idle. This places an upper limit on how long a compromised session can be exploited.

If a session is timed out, the timeout-response option is returned. This is usually a redirect to the login page. Alternatively, the timeout-handler option may be specified. This should contain a Ring handler function that takes the current request and returns a timeout response.

The following options are accepted:

:timeout - the absolute timeout in seconds :timeout-response - the response to send if an absolute timeout occurs :timeout-handler - the handler to run if an absolute timeout occurs

wrap-idle-session-timeout clj

(wrap-idle-session-timeout handler options)

Middleware that times out idle sessions after a specified number of seconds.

If a session is timed out, the timeout-response option is returned. This is usually a redirect to the login page. Alternatively, the timeout-handler option may be specified. This should contain a Ring handler function that takes the current request and returns a timeout response.

The following options are accepted:

:timeout - the idle timeout in seconds (default 600 seconds) :timeout-response - the response to send if an idle timeout occurs :timeout-handler - the handler to run if an idle timeout occurs