Detect when a devise session expires

Question

I\'d like to record when a user\'s session has timed out, using devise and :timeoutable.

At the moment, :timeoutable is working as expected

Answer 1

i've not seen any kind of hook, but you could just override the code in the timeoutable module that is used by devise:

module Devise
  module Models
    module Timeoutable
      def timedout?(last_access)
        #  your custom code goes into this method
        return false if remember_exists_and_not_expired?
        !timeout_in.nil? && last_access && last_access <= timeout_in.ago
      end
    end
  end
end

Answer 2

I think what you need to do is logging the time when the user clicks "Log out" explicitly. Because :timeoutable has a default time period after which user session will automatically expire.

You can do logging "log out" activity by creating a Sessions_Controller which inherits from Devise::SessionsController. After logging current time, don't forget to do super.