Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Related Rants
I sometimes forget to close the tab to my bank's website. I flip back to it, hours, or even days later. As soon as the tab becomes active the "You'll be logged out in 60 second" timer starts ticking. Literally, days after I logged in, I can click "Stay logged in" and it works!
Their session timeout logic is all fucking Javascript based!? Don't they log out the session server-side at some point? How the fuck is my session still valid 2 days after initial login?
rant
sessions-done-wrong
bank