lib/devise/hooks/timeoutable.rb in devise-0.8.2 vs lib/devise/hooks/timeoutable.rb in devise-0.9.0

- old
+ new

@@ -3,14 +3,16 @@ # redirected to the sign in page. Also, each time the request comes and the # record is set, we set the last request time inside it's scoped session to # verify timeout in the following request. Warden::Manager.after_set_user do |record, warden, options| scope = options[:scope] - if record && record.respond_to?(:timeout?) && warden.authenticated?(scope) + if record && record.respond_to?(:timedout?) && warden.authenticated?(scope) last_request_at = warden.session(scope)['last_request_at'] - if record.timeout?(last_request_at) + + if record.timedout?(last_request_at) warden.logout(scope) throw :warden, :scope => scope, :message => :timeout end + warden.session(scope)['last_request_at'] = Time.now.utc end end