wood burning stoves 2.0*
The moose likes Security and the fly likes force logout Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "force logout" Watch "force logout" New topic
Author

force logout

Muhammad Imad Qureshi
Ranch Hand

Joined: Sep 13, 2005
Posts: 238
How do I force the user to logout after certain period of activity lets say 60 minutes. In my web.xml I have

<session-config>
<session-timeout>20</session-timeout>
</session-config>

is this the only place to configure force logout or is there anything else.
I am using jboss.
Thanks
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41133
    
  45
The session timeout triggers after a certain period of inactivity. If you want to log out a user after a certain amount of activity, you'll need to implement that yourself - the servlet API has no provisions for that. But why would you want to log out an active user?


Ping & DNS - my free Android networking tools app
 
It is sorta covered in the JavaRanch Style Guide.
 
subject: force logout
 
Similar Threads
need help with session time our
session problem
what is session expunging?was asked this question in an interview?
session timeout in DD
Interview question asked to me which I could not answer