Session Timeout - Best Practice or Gem?

rubyonrails-talk
1

What's the best practice for implementing session timeouts? Or is there a gem for this functionality? I remember seeing one several months ago but it appears that it's no longer available.

Gavin

2

I wrote a simple cron job that just runs once a day, and expires any session older than a week.

In an ideal world, any session that is not used in more than N hours should be considered stale, and require a login. I'm not certain how to implement this yet.

--Michael

3

I wrote a simple cron job that just runs once a day, and expires any session older than a week.

In an ideal world, any session that is not used in more than N hours should be considered stale, and require a login. I'm not certain how to implement this yet.

4

What's the best practice for implementing session timeouts?

Check out Rails' sweepers