Invalidate login in Laravel when user leaves the page

Question

It seems a small and easy to solve problem, but I cant find any solution for it.

I want to login the users only for that session while the are browsing the site. As soon as they close the tab I want to make their session expired. As much as I know I can't do this in the built-in Auth class.

How could I do this efficiently?

Bogdan · Accepted Answer · 2015-11-17T16:14:29.657

2

Short answer: YOU CAN'T

The session can be destroyed when the entire browser is closed by simply setting expire_on_close in config/session.php (also make sure you clear the cookies in your browser for this to work):

'expire_on_close' => true,

But there is no way to detect when only a tab is closed in the browser. The closest thing you would have is the JavasSript method onbeforeunload that triggers when you close a tab. But it also triggers when you navigate away from a page or hit the back button, and there's no way to differentiate between those actions.

You could set a very short session time on the server, and "ping" the server from any open page, to let it know to keep the session still in use, which would mean it would very quickly expire when the tabs that have the app open are closed, but that's an extremely ugly solution.

edited Nov 17 '15 at 16:14

answered Nov 17 '15 at 15:49

Bogdan

43,166
12
128
129

How I destroy a LARAVEL session when the entire browser is closed? That would be enough for me. – NoNameProvided Nov 17 '15 at 16:10
I've updated my answer to include the solution for that case. – Bogdan Nov 17 '15 at 16:14
Look at that! I ran through it but it looks I missed that option. Thanks for the answer! – NoNameProvided Nov 17 '15 at 16:18
@Bogdan i've tried with 'expire_on_close' => true but it doesn't work – Francesco Taioli Apr 05 '20 at 16:22

score 0 · Answer 2 · edited May 23 '17 at 12:30

0

Since PHP is server side code, it only knows the last time/page that was accessed.

See: Destroy PHP session on page leaving

edited May 23 '17 at 12:30

Community

1
1

answered Nov 17 '15 at 15:44

MSD

349
1
4
16

Invalidate login in Laravel when user leaves the page

2 Answers2