Re: Tomcat and Session timeouts

From: Carl Howells (chowells_at_janrain.com)
Date: 01/29/04 

Date: Thu, 29 Jan 2004 10:36:48 -0800

Tony Morris wrote:

> Use a HttpSessionListener.
> If the session times out, you could update a dynamic message that the login
> page displays.

What am I missing? If the Listener notifies my code of a timeout, I know that a
given user's session has timed out. And so I know that when that listener hits the
login page again, I should include a timeout message. But how do I know when that
particular user hits the timeout page again? I can't get session information from
them anymore, can I?

Or do I need to use some extra mechanism to keep track of the user name they think
they've logged in with, like a cookie or some kind URL encoded information? I'd
really like to avoid having an extra mechanism if I can.

Relevant Pages

  • Re: Macro to login automatically for Win6530 Emulator
    ... I feel so frustrated every time to login to the Tandem machine using ... Because there is certain time our for that session. ... Tandem machine, ... is there any way to set infinite timeout for a session. ...
    (comp.sys.tandem)
  • Re: session related issue
    ... You can set up a Javascript bit to force the person to the login at that time you estimate the timeout has occurred, although timeout is server side and you cannot truly tell. ... make sure you abandon session in case you arrived early. ... in my application i am facing problems in maintaining session state. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: how to persist login
    ... Because the session has timed out. ... could hijack the session. ... The default timeout for the cookie is one hour. ... I am persisting the login with the statement below ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: What to do with Authentication/Session Timeout?
    ... Session timeout occurs, all of the user information will be lost. ... I've tried doing a Reponse.Redirect call back to my login page whenever I ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Please! Doesnt anyone know a better way to do this?
    ... account, they need to automatically be directed to the page to enter data ... session variable on the Account page. ... I assume here that you're checking a database when the user attempts to ... When a new user attempts to login or clicks to register, ...
    (microsoft.public.dotnet.framework.aspnet)