class User::SessionsController < User::Base

#abridgement...


    if User::Authenticator.new(user_member).authenticate(@form.password)
      if user_member.suspended?
        flash.now.alert = "Account is suspended"
        render action: "new"
      else
        session[:user_member_id] = user_member.id
        #Save the current time in session at login.
        session[:last_access_time] = Time.current
        flash.notice = "You are now logged"
        redirect_to :user_root
      end
    else
      flash.now.alert = "Incorrect email address or password"
      render action: "new"
    end
  end
end

#Set timeout time to 60 minutes
TIMEOUT = 60.minutes

private def check_timeout

  if current_user
    #Session if last access was less than 60 minutes[:last_access_time]To the current time
    if session[:last_access_time] >= TIMEOUT.ago
      session[:last_access_time] = Time.current

    #If the last access is not within 60, delete the session as a session timeout and
    #Redirect to the top screen.
    else
      session.delete(user_id)
      flash.alert = "The session has timed out."
      redirect_to :staff_login
    end
  end
end

Recommended Posts