In which ways the time for session timeout can be defined in Java EE? I am looking beyond obvious ways, such as setting session timeout in web.xml or HttpSession.setMaxInactiveInterval().
I am currently reviewing a Java EE application, but I can't find anything related to session timeout definition. The web app is in Weblogic. I am assuming that since there is no session timeout definition, the session will never expire.
解决方案
As you're looking for how the session can be timed out in Weblogic, I can add
TimeoutSecs in weblogic.xml or check for any point in the code where session is killed by session.invalidate() on logout.
By the way, it will not be infinite.
On Weblogic, the default in web.xml (if no value specified) is to use the TimeoutSecs value in weblogic.xml, which defaults to 3600 secs i.e. 60 mins
676
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
