-> > Finally (thanks if you've read this far :-)) I've noticed there doesn't
-> > seem to be any expiring of sessions in quixote although the hooks are
-> > there to do it.  Is this expected to be done by session managers?
->
-> We expire sessions via a separate process started by a cron job.

(just for the alternate view ;)

I don't bother -- in my SQL-based session persistence mechanism, I just
tack on a WHERE clause:

"""
SELECT user_id, quixote_session_id, remote_addr, created, last_access,
       current_folder_id, lab_id
          FROM sessions
             WHERE quixote_session_id=%(session_id)s AND
                  last_access > now() - %(expiry)s::INTERVAL
"""

The 'sessions' table can be cleaned out at any point, of course.

cheers,
--titus