fix: rotate session id proactively

[pauldambra]

We reviewed the session idle timeout code and some of the naming was off, so this changes the names

We also periodically get reports that some events sneak through after many tens of hours of idle activity before the session id rotates. This is very surprising from reading the code but is clearly happening, let's make it (even more) impossible by:

• every time we see activity
• set a timeout to reset the session id after slightly more than the idle timeout
• if we see activity again we clear and recreate that timeout
• otherwise we reset the session id and any return from idle will create a new session id and not be able to leak to the old one

---

What I'm worried about here after talking it through with @robbie-c in person is that the code makes sense but we don't know it will fix the problem since we don't know what the problem is 🤔

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
posthog-js	✅ Ready (Inspect)	Visit Preview	Nov 28, 2024 0:16am

[github-actions[bot]]

Size Change: +2 kB (+0.06%)

Total Size: 3.18 MB

Filename	Size	Change
dist/array.full.es5.js	257 kB	+234 B (+0.09%)
dist/array.full.js	361 kB	+196 B (+0.05%)
dist/array.full.no-external.js	360 kB	+196 B (+0.05%)
dist/array.js	175 kB	+196 B (+0.11%)
dist/array.no-external.js	174 kB	+196 B (+0.11%)
dist/main.js	176 kB	+196 B (+0.11%)
dist/module.full.js	361 kB	+196 B (+0.05%)
dist/module.full.no-external.js	360 kB	+196 B (+0.05%)
dist/module.js	175 kB	+196 B (+0.11%)
dist/module.no-external.js	174 kB	+196 B (+0.11%)

ℹ️ View Unchanged

| Filename | Size | | :--- | :---: | | `dist/all-external-dependencies.js` | 206 kB | | `dist/customizations.full.js` | 12.2 kB | | `dist/dead-clicks-autocapture.js` | 14.3 kB | | `dist/exception-autocapture.js` | 9.37 kB | | `dist/external-scripts-loader.js` | 2.29 kB | | `dist/recorder-v2.js` | 115 kB | | `dist/recorder.js` | 115 kB | | `dist/surveys-preview.js` | 57.6 kB | | `dist/surveys.js` | 63.2 kB | | `dist/tracing-headers.js` | 1.75 kB | | `dist/web-vitals.js` | 10.3 kB |

_{compressed-size-action}

[posthog-bot]

This PR hasn't seen activity in a week! Should it be merged, closed, or further worked on? If you want to keep it open, post a comment or remove the stale label – otherwise this will be closed in another week.

[posthog-bot]

This PR hasn't seen activity in a week! Should it be merged, closed, or further worked on? If you want to keep it open, post a comment or remove the stale label – otherwise this will be closed in another week.

[marandaneto]

What I'm worried about here after talking it through with @robbie-c in person is that the code makes sense but we don't know it will fix the problem since we don't know what the problem is 🤔

I agree but, we know the problem exists, we cannot reproduce it, so every small interaction may lead to fixing it. We can always roll back if it worsens it.