session-timeout immediately invalidates the session

This commit is contained in:
Nikos Mavrogiannopoulos
2015-05-19 15:59:24 +02:00
parent e9d35493f0
commit 0c06211465

View File

@@ -192,7 +192,8 @@ void expire_client_entry(sec_mod_st *sec, client_entry_st * e)
if (e->in_use == 0) {
e->time = time(0);
if (sec->config->persistent_cookies == 0 && (e->discon_reason == REASON_USER_DISCONNECT || e->discon_reason == REASON_SERVER_DISCONNECT)) {
if (sec->config->persistent_cookies == 0 && (e->discon_reason == REASON_USER_DISCONNECT
|| e->discon_reason == REASON_SERVER_DISCONNECT || e->discon_reason == REASON_SESSION_TIMEOUT)) {
seclog(sec, LOG_INFO, "invalidating session of user '%s' "SESSION_STR,
e->auth_info.username, e->auth_info.psid);
/* immediately disconnect the user */