ways to logout user or end a session.

[krishna prasad gunasekaran]

is calling invalidate() method on that session object the only way a user can be logged out if "he chooses" to be so?
declaring session timeouts in xml,servlets are one way, but they are fixed,static. what's the solution for indeterminate dynamic session periods, periods whose length are determined by the user.

have a nice day,
krishna prasad

[Bear Bibeault]

That greatly depends on what it means to be "logged in".

[krishna prasad gunasekaran]

'what it means to be "logged in".'

what does the above quote mean? about roles, privileges?..or is it about the answer to the question-does this logged user need a session?

have a nice day
krishna prasad