Mailing-List: contact users-help@myfaces.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "MyFaces Discussion" <users@myfaces.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of mkienenb@gmail.com designates
 64.233.182.201 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=hIKa5MXyVdXYwRDdcrhYnz2S9YsNZlJqu3vK05vfsPhlhW+pBJqWirq0BZ7AJwiDolitkk9vkcot5z3l04FK0CBr7mJoaRt7NzZPx3UdIxhflgGmT+b3RIKX2hRrbWjqQnB38IyEcg7BDWx7ROOr5214zgOYcdEg/Y3LRHLs3rw=
Message-ID: <8f985b960602281019q786c1532p272d36a85ed5e30c@mail.gmail.com>
Date: Tue, 28 Feb 2006 13:19:38 -0500
From: "Mike Kienenberger" <mkienenb@gmail.com>
To: "MyFaces Discussion" <users@myfaces.apache.org>
Subject: Re: Session Expiration Default Target?
In-Reply-To: <44044B70.2060208@parkplatz.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: 
 <67538F65C12991418BE2801290008A070230F6BE@ilnort1msgusr15.ITServices.sbc.com>
	 <c532cc760602271743o7279ac7an520bcfc79be778a0@mail.gmail.com>
	 <c532cc760602271756i16e5ede6o26fa7948ac9008d2@mail.gmail.com>
	 <8f985b960602271811s779ba770g7581d9469599fc58@mail.gmail.com>
	 <44044B70.2060208@parkplatz.net>

> > On 2/27/06, Elam Daly <elam.daly@gmail.com> wrote:
> >>how do I determine if a session has expired?

> Mike Kienenberger wrote:
> > You have to do something like this:
> >
> >             boolean expired =3D false;
> >             try
> >             {
> >                  session.getAttribute("anything"):
> >                  expired =3D false;
> >             }
> >             catch (IllegalStateException e)
> >             {
> >                 expired =3D true;
> >             }

On 2/28/06, Jonathan Harley <jon@parkplatz.net> wrote:
> No, in a filter you can just call session.isNew()

That would be incorrect, although you could possibly replace
getAttribute() with isNew() in the code above.


 public abstract boolean isNew()

    A session is considered to be "new" if it has been created by the
server, but the client has not yet acknowledged joining the session.
For example, if the server supported only cookie-based sessions and
the client had completely disabled the use of cookies, then calls to
HttpServletRequest.getSession() would always return "new" sessions.

    Returns:
        true if the session has been created by the server but the
client has not yet acknowledged joining the session; false otherwise
    Throws: IllegalStateException
        if an attempt is made to access session data after the session
has been invalidated