如何設置rails HTTP身份驗證的超時時間？

Question

我在我的網站的一些控制器上使用rails HTTP摘要認證。它爲我的目的工作正常，但它超時很快。

如何調整HTTP摘要認證的超時參數？ 如何實現HTTP基本身份驗證的註銷？

感謝，

Answer 1

如果用戶離開網站，或關閉瀏覽器等，並且希望他們能夠保持登錄狀態：

在你SessionsController：

def create 
    member = Member.find_by_user_name(params[:user_name]) 
    if member && member.authenticate(params[:password]) 
     session[:member_id] = member.id 
     if params["remember_me"] == "1" 
     cookies[:digest] = {:value => member.password_digest, :expires => Time.now + 720000} 
     else 
     cookies[:digest] = nil 
     end 
     redirect_to (url_to_go_to_after_login), :notice => "Logged in!" 
    else 
     redirect_to (login_url), :alert => "Invalid email or password" 
    end 
    end 

如何註銷用戶：

def destroy 
    session[:member_id] = nil 
    cookies[:digest] = nil 
    redirect_to url_to_go_to_after_logout, :notice => "Logged out!" 
    end 

如何從rememberme coo登錄用戶紀伊：

def new 
    if member = Member.find_by_password_digest(cookies[:digest]) 
     session[:member_id] = member.id 
     redirect_to (url_to_go_to_after_login), :notice => "Hello#{member.first_name}" 
    end 
    end 

要設置過期時間後（應該工作在軌> 2.3 https://github.com/rails/rails/blob/2-3-stable/actionpack/lib/action_controller/session/abstract_store.rb#L175）：

Your::Application.config.session_store :active_record_store, { 
    key: "your_session_id", 
    domain: ".your-domain.com", 
    expire_after: 48.hours, 
}