Mantis - Resin
Viewing Issue Advanced Details
5170 minor always 08-03-12 00:25 09-04-12 19:12
Mathias Lagerwall  
ferg  
normal  
closed 4.0.29  
fixed  
none    
none 4.0.31  
0005170: Sessions do not time out correctly
Resin doesn't seem to honor the session-timeout when a session has been moved to storage due to session-max reached.

My session configuration during the test.

<web-app-default>
 <session-config>
  <use-persistent-store/>
  <enable-url-rewriting>false</enable-url-rewriting>
  <reuse-session-id>false</reuse-session-id>
  <save-mode>on-shutdown</save-mode>
  <serialization-type>hessian</serialization-type>
  <session-timeout>1</session-timeout>
  <session-max>2</session-max>
 </session-config>
</web-app-default>


Scenario:

1. Create session aaaX...
2. Create session aaag...
3. Try to create session aaai... results in ->
3.1 Session aaaX... is removed from memory and saved.
4. Due to the timeout, session aaag... and aaai... are removed.
5. When accessing session aaaX again it is loaded from storage and not timed out as it should be.

Resin 4.0.29 Pro log:
[2012/08/02 16:39:22.254] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] new
[2012/08/02 16:39:22.255] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] create session
[2012/08/02 16:39:40.476] SessionImpl[aaagZcEIN3zIhcYwXXNJt,/dk] new
[2012/08/02 16:39:40.476] SessionImpl[aaagZcEIN3zIhcYwXXNJt,/dk] create session
[2012/08/02 16:39:43.982] SessionImpl[aaaiPhIOe5G-56QnYXNJt,/dk] new
[2012/08/02 16:39:43.982] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] remove
[2012/08/02 16:39:44.009] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] session save valueHash=HashKey[59b604d4]
[2012/08/02 16:39:44.009] SessionImpl[aaaiPhIOe5G-56QnYXNJt,/dk] create session
[2012/08/02 16:41:01.042] SessionImpl[aaaiPhIOe5G-56QnYXNJt,/dk] remove
[2012/08/02 16:41:01.060] SessionImpl[aaaiPhIOe5G-56QnYXNJt,/dk] session save valueHash=HashKey[12b0bc68]
[2012/08/02 16:41:01.060] SessionImpl[aaaiPhIOe5G-56QnYXNJt,/dk] timeout
[2012/08/02 16:41:01.067] SessionImpl[aaagZcEIN3zIhcYwXXNJt,/dk] remove
[2012/08/02 16:41:01.082] SessionImpl[aaagZcEIN3zIhcYwXXNJt,/dk] session save valueHash=HashKey[139c3476]
[2012/08/02 16:41:01.082] SessionImpl[aaagZcEIN3zIhcYwXXNJt,/dk] timeout
[2012/08/02 16:41:16.356] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] new
[2012/08/02 16:41:16.359] SessionImpl[aaaXUfCGPWzGL_h6SXNJt,/dk] session load valueHash=HashKey[59b604d4]

Have tried this with Resin 4.0.23 Pro as well with the same result.

Best regards
Mathias Lagerwall

Notes
(0006039)
ferg   
09-04-12 19:12   
server/01o9