Mantis - Resin
Viewing Issue Advanced Details
3116 minor always 12-04-08 09:43 03-26-09 16:46
ferg  
ferg  
normal  
closed 3.2.1  
fixed  
none    
none 4.0.0  
0003116: session timeouts
(rep by Richard Grantham)

Yes, the logout code calls session.invalidate() and it works fine. I
have some application logic in SessionListener.sessionDestroyed(...)
which does some housekeeping after someone presses logout or their
session times out, so it's important it's called. I'm finding that the
session does not time out in the configured time (60 seconds) when, for
instance, you close the browser, so SessionListener.sessionDestroyed()
is not called.


Notes
(0003936)
ferg   
03-26-09 16:46   
server/01nk, server/015p