Hacker News new | ask | show | jobs
by BorRagnarok 2690 days ago
If you're not allowed to change state on GET requests, how do you implement timed session expiration in your api? You can't track user activity, in any way, on get requests, but still have to remember when he was last active.