SessionStorage: don't extend expireTime when expired

dg · dg · commit 07c86553af71 · 2026-05-11T23:16:26.000+02:00
diff --git a/src/Bridges/SecurityHttp/SessionStorage.php b/src/Bridges/SecurityHttp/SessionStorage.php
@@ -140,9 +140,9 @@ private function getSessionSection(): SessionSection
 				if ($section->get('expireIdentity')) {
 					$section->remove('identity');
 				}
+			} else {
+				$section->set('expireTime', time() + $section->get('expireDelta')); // sliding expiration
 			}
-
-			$section->set('expireTime', time() + $section->get('expireDelta')); // sliding expiration
 		}
 
 		if (!$section->get('authenticated')) {

Original file line number	Diff line number	Diff line change
`@@ -140,9 +140,9 @@ private function getSessionSection(): SessionSection`
`140`	`140`	`if ($section->get('expireIdentity')) {`
`141`	`141`	`$section->remove('identity');`
`142`	`142`	`}`
	`143`	`+ } else {`
	`144`	`+ $section->set('expireTime', time() + $section->get('expireDelta')); // sliding expiration`
`143`	`145`	`}`
`144`		`-`
`145`		`- $section->set('expireTime', time() + $section->get('expireDelta')); // sliding expiration`
`146`	`146`	`}`
`147`	`147`
`148`	`148`	`if (!$section->get('authenticated')) {`