File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
http://aspose.com/file-tools
The moose likes Security and the fly likes force logout Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Engineering » Security
Bookmark "force logout" Watch "force logout" New topic
Author

force logout

Muhammad Imad Qureshi
Ranch Hand

Joined: Sep 13, 2005
Posts: 238
How do I force the user to logout after certain period of activity lets say 60 minutes. In my web.xml I have

<session-config>
<session-timeout>20</session-timeout>
</session-config>

is this the only place to configure force logout or is there anything else.
I am using jboss.
Thanks
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 41823
    
  62
The session timeout triggers after a certain period of inactivity. If you want to log out a user after a certain amount of activity, you'll need to implement that yourself - the servlet API has no provisions for that. But why would you want to log out an active user?


Ping & DNS - my free Android networking tools app
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: force logout