refresh session timeout on access

2 files changed, 10 insertions, 3 deletions

diff --git a/src/jwebmail/__init__.py b/src/jwebmail/__init__.py
index dd1335c..631215b 100644
--- a/src/jwebmail/__init__.py
+++ b/src/jwebmail/__init__.py
@@ -36,7 +36,7 @@ else:
 
     toml_read_file = dict(load=toml_load, text=True)
 
-__version__ = "2.3.0.dev2"
+__version__ = "2.3.0.dev3"
 
 csrf = CSRFProtect()
 
diff --git a/src/jwebmail/read_mails.py b/src/jwebmail/read_mails.py
index 01252ee..44eba8d 100644
--- a/src/jwebmail/read_mails.py
+++ b/src/jwebmail/read_mails.py
@@ -61,11 +61,18 @@ class MysqlTimeoutSession:
         cur.execute("DELETE FROM session WHERE timeout < NOW()")
         cur.execute("SELECT password FROM session WHERE user = %s", [key])
         row = cur.fetchone()
-        self.conn.commit()
-        cur.close()
+
         if row is None:
+            self.conn.commit()
+            cur.close()
             return None
         else:
+            timeout = datetime.now() + timedelta(seconds=self.timeout)
+            cur.execute(
+                "UPDATE session SET timeout = %s WHERE user = %s", [timeout, key]
+            )
+            self.conn.commit()
+            cur.close()
             return row[0]