Re: HttpSessionListener.sessionDestroyed() not getting called

WebSphere should have a time that can be set, I think it's set like this
<session-config><session-timeout>60</session-timeout></session-config>. When
the timeout occurs, the HttpSession.invalidate() will be invoked. You could
also create a simple JSP or servlet to do the same thing. You could just a
link a log off link to it.

If you are more concerned with the session that someone just leaves open
with no activity, the timeout is what you need to look at.
http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q1=httpsession&uid=swg21163875&loc=en_US&cs=utf-8&lang=en

--
James R. Perkins


On Wed, Jan 27, 2010 at 10:56, James H. H. Lampert <jamesl@xxxxxxxxxxxxxxxxx

wrote:

James Perkins wrote:

The HttpSessionListener.sessionDestroyed() will not be invoked in the

user

closes their tab or possibly even their browser. The method is invoked

when

HttpSession.invalidate() method is invoked. So a timeout could trigger

that

you can explicitly invoke it.

And under what conditions is HttpSession.invalidate() invoked?

(I've already suggested to the developer in charge of this particular
item that maybe it's not such a smart idea to depend on something
external to our code to time us out)

--
JHHL
--
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.