We have an application where we have to disable the cookies and use url-rewriting. i want the user to invalidate after some specified time. i have given the <session-timeout> parameter in my web.xml file.
i have given the value as 1 which means 1 minute. when i click the logout link on the particular jsp page (index.jsp) then i am logging out but i want the user to invalidate when i click on any other link on the page after the session expires (i.e., after 1 minute). But i am not able to invalidate after 1 minute. Can anyone tell me what should i do? Thanks in advance.
Use setMaxInactiveInterval(int seconds) and in the next page check if session.isNew() if yes process if no proceed.
Joined: Feb 25, 2010
This is my assumption. You must be having a log out page and one correct page.
If the session is still active when you click on link you should go to correct page
else go to logout page/invalid page. Right?
Then this is the solution.
At the begning of new page
redirect to invalid page
continue with this page