[hunchentoot-devel] long living session

[Edi Weitz]

On Wed, 17 Dec 2008 11:06:49 +0100, Jens Teich <info at jensteich.de> wrote:

> Leslie P. Polzer schrieb:
>> There doesn't seem to be a built-in way to do that.
>> 
>> START-SESSION sets a cookie with :EXPIRES NIL, which probably means
>> "when the browser is closed". Define your own START-SESSION to pass
>> a custom timeout.
>
> Thanks for the hint. I did it exactly that way and it solved the
> problem.

I would do it a bit differently, but that's a matter of taste.  For
me, a "session" isn't something that should continue to exist if the
user closes the browser or comes back after a week.  What I would do
in this case (and have done in others) is to give them a long living
cookie and automatically open a new session when they come back and
the cookie is recognized.  That also has the added benefit that
whatever is tied to the old session can be cleaned up and doesn't hang
around indefinitely.

But, as I said, tastes differ.

Edi.