setMaxInactiveInterval and <session-timeout> question

[Chrix Wu]

are the following four the same ?

setMaxInactiveInterval(0)

setMaxInactiveInterval(-1)

<session-config>
        <session-timeout>0</session-timeout>
</session-config>

<session-config>
        <session-timeout>-1</session-timeout>
</session-config>

[Chrix Wu]

Found a potential incorrect note in FREDERIC ESNAULT's revision notes

he said in setMaxInactiveInterval() , -1 works like invalidate()

but the offical API said A negative time indicates the session should never timeout.

why??

[swapnl patil]

setMaxInactiveInterval() takes time in second and web.xml we specify the time in minute.

then think on it. Read Head first for Servlet & JSP Session management chapter for more clarification .

[Lucas Smith]

Session
setMaxInactiveInterval(0) == invalidate()
setMaxInactiveInterval(-1) == session will never expire

Cookie
setMaxAge(0) == cookie is invalidated
setMaxAge(-1) == cookie is valid till browser closing

[Chrix Wu]

Lucas Smith wrote:Session
setMaxInactiveInterval(0) == invalidate()
setMaxInactiveInterval(-1) == session will never expire

Cookie
setMaxAge(0) == cookie is invalidated
setMaxAge(-1) == cookie is valid till browser closing

what if i set the "time-out" in DD to the value of -1?

[Ankit Garg]

From the servlet spec about <session-timeout>

If the timeout is 0 or less, the container ensures the default behavior of sessions is never to time out.

[Chrix Wu]

Ankit Garg wrote:From the servlet spec about <session-timeout>

If the timeout is 0 or less, the container ensures the default behavior of sessions is never to time out.

Thanks

[Lucas Smith]

It's misleading.
setMaxInactiveInterval(0) -> invalidate()
<session-timeout>0</session-timeout> -> never invalidate

[warunyou rattanabuangam]

Lucas Smith wrote:Session
setMaxInactiveInterval(0) == invalidate()
setMaxInactiveInterval(-1) == session will never expire

Cookie
setMaxAge(0) == cookie is invalidated
setMaxAge(-1) == cookie is valid till browser closing

thank you.

[Cristian Daniel Ortiz Cuellar]

warunyou rattanabuangam wrote:

Lucas Smith wrote:Session
setMaxInactiveInterval(0) == invalidate()
setMaxInactiveInterval(-1) == session will never expire

Cookie
setMaxAge(0) == cookie is invalidated
setMaxAge(-1) == cookie is valid till browser closing

thank you.

if i make request.getSession(false).setMaxInactiveInterval(0); the session will never expire..

javax.​servlet.​http.​HttpSession
public void setMaxInactiveInterval(int interval)
Specifies the time, in seconds, between client requests before the servlet container will invalidate this session.
An interval value of zero or less indicates that the session should never timeout.

[Frits Walraven]

have a look at this thread for more about his subject.

Regards,
Frits