odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] correct session cleaning 

bzr revid: chs@openerp.com-20120117170636-7z6epwzt7rlrtaip
This commit is contained in:
Christophe Simonis 2012-01-17 18:06:36 +01:00
parent b9a290a38b
commit 031f85a37a
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
addons/web/common/http.py
View File

@ -328,6 +328,7 @@ def session_context(request, storage_path, session_cookie='sessionid'):
# Remove all OpenERPSession instances with no uid, they're generated
# either by login process or by HTTP requests without an OpenERP
# session id, and are generally noise
removed_sessions = []
for key, value in request.session.items():
if (isinstance(value, session.OpenERPSession)
and not value._uid
@ -335,6 +336,7 @@ def session_context(request, storage_path, session_cookie='sessionid'):
and value._creation_time + (60*5) < time.time() # FIXME do not use a fixed value
):
_logger.debug('remove session %s', key)
removed_sessions.append(key)
del request.session[key]
with session_lock:
@ -364,7 +366,7 @@ def session_context(request, storage_path, session_cookie='sessionid'):
# add missing keys
for k, v in in_store.iteritems():
if k not in request.session:
if k not in request.session and k not in removed_sessions:
request.session[k] = v
session_store.save(request.session)