fixes #103

DataStorage/Session/HttpSession.php

@@ -55,17 +55,26 @@ class HttpSession implements SessionInterface
      */
     private $sid = null;
     
+    /**
+     * Inactivity Interval.
+     *
+     * @var int
+     * @since 1.0.0
+     */
+    private $inactivityInterval = 0;
+
     /**
      * Constructor.
      *
      * @param int             $liftetime Session life time
      * @param string|int|bool $sid       Session id
+     * @param int             $inactivityInterval Interval for session activity
      *
      * @throws LockException Throws this exception if the session is alrady locked for further interaction.
      *
      * @since  1.0.0
      */
-    public function __construct(int $liftetime = 3600, $sid = false)
+    public function __construct(int $liftetime = 3600, $sid = false, int $inactivityInterval = 0)
     {
         if (self::$isLocked) {
             throw new LockException('HttpSession');
@@ -75,12 +84,20 @@ class HttpSession implements SessionInterface
             session_id($sid);
         }
         
+        $this->inactivityInterval = $inactivityInterval;
+
         session_set_cookie_params($liftetime, '/', '', false, true);
         session_start();
+        
+        if($this->inactivityInterval > 0 && ($this->inactivityInterval + ($_SESSION['lastActivity'] ?? 0) < time())) {
+            $this->destroy();
+        }
+        
         $this->sessionData = $_SESSION;
         $_SESSION          = null;
-
+        $this->sessionData['lastActivity'] = time();
         $this->sid = session_id();
+        
         $this->setCsrfProtection();
     }
 
@@ -186,6 +203,12 @@ class HttpSession implements SessionInterface
         $this->sid = $sid;
     }
     
+    private function destroy() /* : void */
+    {
+        session_destroy();
+        session_start();
+    }
+
     /**
      * Destruct session.
      *