Laravel：会议在注册表开放时到期

Question

I have have a web app which is waiting for users on a laptop in kiosk mode. Sometimes, registration fails and users get an error screen - I think it's 419 Session Expired.

So I assume two hours after the login screen loads, the session expires (I kept the default of 120 minutes in config/session.php) and Laravel does not accept any request from that page.

How should I deal with this? I know how to make a page reload every 110 minutes or so using JS, but then I'd have to check the registration form is being filled out at this moment. This does not feel like a clean solution to me.

Is there any alternative, such as a mechanism to make Laravel less strict when a request comes from the register or login pages?

Answer 1

As mentioned, the simplest solution is usually to extend the session expiration time from the default of 2 hours (which is very short).

If longer sessions are not desirable, another option is to keep the session alive for as long as the browser page is open by using javascript.

Add a route in routes/web.php:

Route::post('/keep-alive', function () {
    return response()->json(['ok' => true]);
});

And then ping this route periodically with javascript:

setInterval(() => {
    axios.post('/keep-alive')
        .then(() => {})
        .catch(() => {})
}, 600000)

(I used axios to make the POST request because it's included with a default Laravel install, but you can use anything to make the request.)

Since the request passes through the web middleware group, the session middleware should be run and keep the session alive. If the browser page is closed, the computer is put to sleep, etc., then the session will still expire normally after the configured time has elapsed.

You can also check for session expiration responses from the javascript call and refresh the page if one is detected. This case is most likely to occur if the computer resumes operation from a sleeping state.