You'll have to send Ajax requests at continuous intervals to the server to check how old the session is. The server has no way of informing this to the client browser. Since the ajaz request will keep sending requests, so the session will not timeout automatically. Thus you'll have to manually invalidate a session if its too old. This can be done in the same program that will check how old the session is. You can store a session attribute which will store the time at which the session started or user pressed yes on the confirmation dialog which prompted the user whether to continue the session or not.
Is your application in
Struts?? If not I'll move this
thread to the appropriate forum...