Approaches to timing out sessions on a web app using AJAX autorefreshes
Posted
by Braintapper
on Stack Overflow
See other posts from Stack Overflow
or by Braintapper
Published on 2010-04-22T14:16:49Z
Indexed on
2010/04/22
14:53 UTC
Read the original article
Hit count: 245
I'm writing a web application that autorefreshes data with an AJAX call at set intervals.
Because it's doing that, server side user sessions never time out, since the last activity is refreshed with every ajax call.
Are there good client side rules I could implement to time out the user? I.e. should I track mouse movements in the browser, etc., or should I point the AJAX calls to URLs that don't refresh the session?
I like that my AJAX calls hit a session-enabled URL, because I can also validate that the user is logged in, etc.
Any thoughts in terms of whether I should even bother timing out the users?
© Stack Overflow or respective owner
