File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes force logout Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Java Interview Guide this week in the Jobs Discussion forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "force logout" Watch "force logout" New topic

force logout

Muhammad Imad Qureshi
Ranch Hand

Joined: Sep 13, 2005
Posts: 238
How do I force the user to logout after certain period of activity lets say 60 minutes. In my web.xml I have


is this the only place to configure force logout or is there anything else.
I am using jboss.
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 42965
The session timeout triggers after a certain period of inactivity. If you want to log out a user after a certain amount of activity, you'll need to implement that yourself - the servlet API has no provisions for that. But why would you want to log out an active user?
I agree. Here's the link:
subject: force logout
It's not a secret anymore!