CODEWITHSUNDEEP
djangopython-2.7sessionauthenticationdjango-sessions
Hardik Patel
Hardik Patel

Reputation: 493

Django default behaviour of session - Session get expired after closing browser

I read Django tutorial but found nothing related to never expiring session.

Requirement - User should logged out only if he/she initiate by clicking on logout.

How can I solve this issue? My django project settings related to session - 

INSTALLED_APPS = (
    ..
    'django.contrib.sessions',
    ..
)
REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework.authentication.TokenAuthentication',
        'rest_framework.authentication.BasicAuthentication',
        #'rest_framework.authentication.SessionAuthentication',
    )
}
MIDDLEWARE_CLASSES = (
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
)

AUTHENTICATION_BACKENDS = (
    "django.contrib.auth.backends.ModelBackend",
    "allauth.account.auth_backends.AuthenticationBackend",
)

Upvotes: 0

Views: 352

Answers (1)

duffn
duffn

Reputation: 3760

By default Django keeps sessions between browser closes. You can modify this behavior with the SESSION_EXPIRE_AT_BROWSER_CLOSE setting.

https://docs.djangoproject.com/en/1.8/topics/http/sessions/#browser-length-vs-persistent-sessions

Upvotes: 3

Related Questions