From a271837007d19e90b9c04b90b047392aa9b4518a Mon Sep 17 00:00:00 2001 From: Ryan Petrello Date: Wed, 22 Aug 2018 15:26:03 -0400 Subject: [PATCH] set the session cookie expiry *properly* on each request see: https://github.com/ansible/tower/issues/2907 --- awx/main/middleware.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/awx/main/middleware.py b/awx/main/middleware.py index 15bbf3aa15..5a79aa54a5 100644 --- a/awx/main/middleware.py +++ b/awx/main/middleware.py @@ -128,8 +128,9 @@ class SessionTimeoutMiddleware(object): def process_response(self, request, response): req_session = getattr(request, 'session', None) if req_session and not req_session.is_empty(): - request.session.set_expiry(request.session.get_expiry_age()) - response['Session-Timeout'] = int(settings.SESSION_COOKIE_AGE) + expiry = int(settings.SESSION_COOKIE_AGE) + request.session.set_expiry(expiry) + response['Session-Timeout'] = expiry return response