Maintaining user logins

Helo all,

I'm developing a web based billing system where i need high security.

I m using Struts in Sun-glass fish server V2.

Here is my prob,
i want to maintain user sessions.
i hav already develop login page where i checked the user name and passwords with DB.

But i need to DO sign out option and session time-out when user set idle ...

Thanks in advance..

Logging out is simply a matter of removing the user object from session.

If the session times out there won't be a user in the session anyway.

This isn't really Struts-related; it's more of a JEE thing.

thanks for quick reply..

but what realy i want to know is ,

how to handle sitation where user forgets to click 'SignOut'..
then anyone who use same browser can log using history..

isn't it?

Sessions expire automatically (usually) depending on how your server is configured. That is still not a Struts issue, however.