You can do this strictly client-side, if requiring Javascript isn't a
problem (which of course an AJAX-based solution does anyway). Just
start a timer from the onLoad event on each page. When 20 minutes has
elapsed, you can either pop an alert which is followed by a redirect to
some appropriate page, or just do the redirect straight away, whatever
you prefer.
The down-side is that a user could disable Javascript after the timer
has begun but before the timeout occurs. But, of course the session
will still expire on the server, so it's probably not a big problem.
And you'll need to keep your session timeout and client-side timeout
values in sync, but that's pretty minor.
Frank
Jon Wingfield wrote:
> I did an AJAX version of this a couple of months ago.
> The slight gotcha is that the AJAX request prolongs the life of the
> session (you can't, it seems, override the cookie for AJAX requests) so
> the interval has to be slightly longer than the expiry time for the
> session.
>
> Reynir Hubner wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hi,
>> I would suggest that you do this by using somethinglike JSON or AJAX.
>> See jasonspec: http://www.crockford.com/JSON/index.html
>>
>> You could make the client query your server, in some interval and check
>> the session state.
>>
>> hope it helps
>> - -reynir
>>
>>
>>
>> Mark wrote:
>>
>>> Is there any way to allow servlets to auto-logout a user when the
>>> timeout
>>> has been reached. Right now, I have tomcat configured for a 20 minute
>>> session timeout. When the session times out, the user gets no
>>> notification
>>> of this event. Is there any way to show the user that they have
>>> logged out?
>>>
>>> Thank you.
>>>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.2.5 (MingW32)
>> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>>
>> iD8DBQFDeeqn19KgIQihNwgRAqT8AJ9ijf9kZZlldgjRTcAEtua+89enKQCgnqjm
>> iuCZACbq4A/JkmtB5yiIc8M=
>> =HSCq
>> -----END PGP SIGNATURE-----
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
>
>
--
Frank W. Zammetti
Founder and Chief Software Architect
Omnytex Technologies
http://www.omnytex.com
AIM: fzammetti
Yahoo: fzammetti
MSN: fzammetti@hotmail.com
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
|