Login Session Time out

[Ola Daniel]

I want my web application to display a page which says your session has timed out when a time out occurs. I dont want it to just display the logon screen when the user's session had timed out. I have tried placing the following code in my web.xml,

 <error-page>
    <error-code>408</error-code>
    <location>/LogonError.jsp?Error=Your Login Session Has Expired</location>
  </error-page>

But My web application still brings up the Login Screen whenever the user the user login has expired.


Help pleaser.

[Ben Souther]

Try using a tool like the LiveHttpHeaders plugin for Firefox to see, exactly what error code is being returned.
Maybe it's not a 408.

[Ben Souther]

Or perhaps, your security settings are not allowing your session expired page to be shown.

What url-pattern are you using?

[Ola Daniel]

Heres the <security-constraint> part of my web.xml.

<security-constraint>
<web-resource-collection>
<web-resource-name>remita</web-resource-name>
<description>
This allows access for user in USER Role
</description>
<url-pattern>/index.html</url-pattern>
<url-pattern>*.htm</url-pattern>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>SuperUser</role-name>
<role-name>UPLOAD</role-name>
<role-name>APPROVE</role-name>
<role-name>user</role-name>
<role-name>OPERATOR</role-name>
</auth-constraint>
</security-constraint>

I dont think the url-pattern is preventing the message page from coming up.