posted 14 years ago
In that case you cant use session time out method [setMaxInactivInterval].
1. Poll an AJAX request and manually calulate the timeout period
if(CurrentTime - HtpSession.getCreationTime - timeOut) = TIMEOUT - [alter_period]) {
sendalert response to rest timeout.
}else if(CurrentTime - HtpSession.getCreationTime - timeOut) = TIMEOUT){
invalidate
}
2. write another filter resetTimeOut
if(request = isNot[AJAX timeout request]
- reset timeout variable
This is the best i got.