Zend Framework: Zend_Controller_Plugin_SessionExpire Component Proposal

Table of Contents

1. Overview

Zend_Controller_Plugin_SessionExpire is a Zend_Controller plugin that provides userland control of session expiration by tracking a users last access time and redirecting to a custom module/controller/action if a timeout is exceeded.

2. References

3. Component Requirements, Constraints, and Acceptance Criteria

• This component will forward requests to a specified action if the session has expired.
• This component will not modify the session.gc_maxlifetime or session.cookie_lifetime.
• This component will include a Zend_Application resource class.
• This component will not destroy the session (the session expire handler will be responsible for that decision).

4. Dependencies on Other Framework Components

• Zend_Application_Resource_ResourceAbstract
• Zend_Controller_Plugin_Abstract
• Zend_Date
• Zend_Session_Namespace

5. Theory of Operation

This component takes a Zend_Config or an array for configuration. The expired session module/controller/action and expiration timeout can be configured.

A Zend_Application resource class is also available which includes the ability to set the stack index to register the plugin at.

6. Milestones / Tasks

• Milestone 1: Working prototype checked into the incubator supporting all use cases.
• Milestone 2: Unit tests exist, work, and are checked into SVN.
• Milestone 3: Initial documentation exists.

7. Class Index

• Zend_Application_Resource_SessionExpire
• Zend_Controller_Plugin_SessionExpire

8. Use Cases

Default settings

Customized expired session module/controller/action and timeout.

Custom session namespace.

Custom session namespace object.

9. Class Skeletons