In our project we are using richfaces 3.2 with myfaces 1.2.2
Application server is JBoss 4.04(Clustered mode)
Session timeout is declared as 30 mins in web.xml
After succesful login , If user is idle for 30 mins session should be invalidated and should show login page.
But it is not happening in case of ajax requests.
Here is a secnario.
If user in a page (main.jsf) after 25 minutes of idle time, if he click a seach button which is a4j:commandButton,he gets some
search result.Since it is ajax button ,only partial page is refreshed..
Again after 5 mins if user clicks any other link, session is getting expired.
User expects his session will be refreshed as he made some request 5 minutes before..
We are using cookies to maintain session.
How jboss invalidate session?
why jboss not refreshing session for ajax request?
Something seems wrong there. Just because it's an AJAX request that shouldn't make any difference. Any request to the JBoss server should reset the session timer, whether cookies are being used or URL rewriting.
An IDE is no substitute for an Intelligent Developer.