what is the max age for JSESSIONID cookie. can we change it?

[Lokendra Shekhawat]

Hi friends,
i wanted to ask one question:


What is the default max age for JSESSIONID cookie which is created when we use session. can we modify it.
if yes then how and where is correct place to modify it.

[David Newton]

Use the <session-config> element in web.xml.

For example, see this thread. Searching the web for something like "java +configure session timeout" or similar will return a lot of hits.

[Lokendra Shekhawat]

i want to prevent the cookie to be invalidated when user closes the browser. i want to set the JSESSIONID cookie to stay alive for say, 20 minutes, whether browser is running or closed. so when user closes the browser and reopen the browser and access the same site he can still use the same JSESSIONID to access the site.

is there any way?

[David Newton]

That's browser-specific behavior--so probably not.

[Lokendra Shekhawat]

But most sites provide that feature like mail sites, orkut etc. how they use the session even browser restarts

[Bear Bibeault]

Many of those sites will use cookies to store the credentials so that a session can be automatically restarted.