lionware/symfony-session-timeout

Invalidate Symfony sessions based on inactivity for a certain period of time

Symfony session timeout

Invalidate Symfony sessions based on inactivity for a certain period of time., _(*1)

This does not make use of garbage collection as suggested in http://symfony.com/doc/current/components/http_foundation/session_configuration.html#session-idle-time-keep-alive. This method is more accurate and does not depend on garbage collection parameters to function well., _(*2)

Installation

Add SymfonySessionTimeout in your composer.json, _(*3)

{
    "require": {
        "lionware/symfony-session-timeout": "*"
    }
}

Register the bundle in your app/AppKernel.php:, _(*4)

public function registerBundles()
{
    $bundles = array(
        // ...
        new Lionware\SymfonySessionTimeoutBundle\LionwareSymfonySessionTimeoutBundle()
    );
)

Add the parameter in app/config/parameters.yml and set the value to your preferred expiration time (which is set to an hour in this example)., _(*5)

parameters:
    lionware_session_expiration_time: 3600

Add the configuration in app/config/config.yml, _(*6)

lionware_symfony_session_timeout:
    session:
        expiration_time: "%lionware_session_expiration_time%"

Notes

Cookie expiration

Expiration of the cookie also means expiration of the session, therefore it is wise to set it to a relatively high value or 0 (valid for the length of the browser session)., _(*7)

# app/config/config.yml
framework:
    session:
        cookie_lifetime: 0