Reading a session no longer renews it

RefactorDocsService
Ya
10 Agosti 2026, 18:44 UTC
Mwandishi
Kamo
Ahadi ya
415cfb2

The expiration on the Redis record IS the session; when it lapses the member is signed out. This service holds its own copy of KSessionService against that SHARED key and renewed it on every read, which alone kept sessions alive forever no matter what the other services decided — five services each did this, so fixing them one at a time never moved the symptom. getSession is now a pure read. Renewal belongs to exactly one place: the client activity tracker calling SecurityService session extend on real interaction. The X-Kamo-Idle-Ms plumbing is deleted with it — it existed only to decide when to renew here. SessionTtlWriteRatchetTest fails the build if anything writes a session TTL in this service again.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei