File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes force logout Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Murach's Java Servlets and JSP this week in the Servlets forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "force logout" Watch "force logout" New topic

force logout

Muhammad Imad Qureshi
Ranch Hand

Joined: Sep 13, 2005
Posts: 238
How do I force the user to logout after certain period of activity lets say 60 minutes. In my web.xml I have


is this the only place to configure force logout or is there anything else.
I am using jboss.
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 41052
The session timeout triggers after a certain period of inactivity. If you want to log out a user after a certain amount of activity, you'll need to implement that yourself - the servlet API has no provisions for that. But why would you want to log out an active user?

Ping & DNS - my free Android networking tools app
I agree. Here's the link:
subject: force logout
Similar Threads
need help with session time our
session problem
what is session expunging?was asked this question in an interview?
session timeout in DD
Interview question asked to me which I could not answer