How to set session timeout ?

[RuneHanssens]

How can I set a timeout on my session? I'm using sessions in combination with headers as said in the document (better for api/xhr). But I can't seem to find anything on how to expire my session after some time.
My session class looks like:

class Session(val name: String, val role: Role) : Principal

install(Sessions) {
        header<Session>("SESSION", SessionStorageMemory()
}

session<Session>{
    challenge {
        call.respond(HttpStatusCode.Unauthorized)
    }
    validate { session ->
       session
    }
}

[cy6erGn0m]

Currenly, only two ad-hoc options: save timestamp into session ids or specify cookie expiration (applicable only with cookie session transport)

[e5l]

I filed a separate issue for the feature request: #1925.

[jonpeterson]

FWIW, I was able to work around this by defining my own SessionTracker.

class MySessionTracker : SessionTracker<MySession> {
    override suspend fun load(call: ApplicationCall, transport: String?): MySession? {
        // your session loading logic here
        // can check for expiration and return null if expired
        // return the session if valid
    }

    override suspend fun store(call: ApplicationCall, value: MySession): String {
        // your session storing logic here
        // return the session ID
    }

    override suspend fun clear(call: ApplicationCall) {
        // your session invalidation logic here
    }

    override fun validate(value: MySession) {
        // any other validation to perform when being set
    }
}

Unfortunately the builder functions on the Sessions feature don't allow for specifying your own SessionTracker, so you have to do something like this:

install(Sessions) {
    register(
        provider = SessionProvider(
            name = "cookie",
            type = MySession::class,
            transport = SessionTransportCookie(
                name = "myAuthCookieName",
                configuration = CookieConfiguration().apply {
                    path = "/"
                    secure = true
                    extensions["SameSite"] = "Lax"
                },
                transformers = emptyList()
            ),
            tracker = MySessionTracker()
        )
    )
}