Implement SESSION_TIMEOUT_REDIRECT

This implements #9
but in a slightly more robust way.

Thanks https://github.com/millerthegorilla

Author: mvantellingen

README.md

@@ -48,3 +48,9 @@ To group by different period use the following setting:
 ```python
 SESSION_EXPIRE_AFTER_LAST_ACTIVITY_GRACE_PERIOD = 60 # group by minute
 ```
+
+To redirect to a custom URL define the following setting:
+
+```python
+SESSION_TIMEOUT_REDIRECT = 'your_redirect_url_here/'
+```

src/django_session_timeout/middleware.py

@@ -2,6 +2,7 @@
 
 from django.conf import settings
 from django.contrib.auth.views import redirect_to_login
+from django.shortcuts import redirect
 
 try:
     from django.utils.deprecation import MiddlewareMixin
@@ -27,7 +28,11 @@ def process_request(self, request):
 
         if session_is_expired:
             request.session.flush()
-            return redirect_to_login(next=request.path)
+            redirect_url = getattr(settings, "SESSION_TIMEOUT_REDIRECT", None)
+            if redirect_url:
+                return redirect(redirect_url)
+            else:
+                return redirect_to_login(next=request.path)
 
         expire_since_last_activity = getattr(
             settings, "SESSION_EXPIRE_AFTER_LAST_ACTIVITY", False

tests/test_middleware.py

@@ -49,6 +49,19 @@ def test_session_expire(r, settings):
         assert response["location"] == "/accounts/login/?next=/"
 
 
+def test_session_expire_custom_redirect(r, settings):
+    settings.SESSION_EXPIRE_SECONDS = 3600
+    settings.SESSION_TIMEOUT_REDIRECT = "/foobar/"
+    middleware = SessionTimeoutMiddleware()
+
+    with freeze_time("2017-08-31 21:46:00"):
+        assert middleware.process_request(r) is None
+
+    with freeze_time("2017-08-31 22:46:01"):
+        response = middleware.process_request(r)
+        assert response["location"] == "/foobar/"
+
+
 def test_session_expire_no_expire_setting(r, settings):
     settings.SESSION_COOKIE_AGE = 3600
     middleware = SessionTimeoutMiddleware()