invalidate the session on closing of browser

VinodTewthia · December 4th, 2004, 01:06 AM

hi---

in my web-application i am keeping track of logged users and their current session (without cookies) in some datastructure and remove the corospondig record form this datastructure when user logged off properly, but! when user's browser craches or colse unexpectedly then what is the correct way to invalidate the session instead waiting for time-out of session?

sachin_desai5684 · June 12th, 2007, 07:35 AM

Quote:

quote:Originally posted by VinodTewthia
hi---

in my web-application i am keeping track of logged users and their current session (without cookies) in some datastructure and remove the corospondig record form this datastructure when user logged off properly, but! when user's browser craches or colse unexpectedly then what is the correct way to invalidate the session instead waiting for time-out of session?

s.g.desai

iamrakesh22 · June 12th, 2007, 08:19 AM

Hi,

You can do this by setting the session time out in the web.xml; some thing like the one bellow

Code:

<session-config>
<session-timeout>30</session-timeout>
</session-config>

And you can implement onunload() in the jsp page and call a java script method and use iframes to send a request to a servlet which will invalidate the session.

Have a look at the following discussions on this topic.

http://www.theserverside.com/discuss...hread_id=38027
http://forum.java.sun.com/thread.jsp...sageID=2832913
http://www.jguru.com/faq/view.jsp?EID=34927
http://forum.java.sun.com/thread.jsp...hreadID=537660
http://onesearch.sun.com/search/ones...orums&site=dev

Hope it gives you usefull information.

Regards,
Rakesh

meetravig · July 14th, 2007, 01:47 AM

When unexpected close of browser happens, onunload may not work. So better to use session-timeout of web.xml.

enjay · July 21st, 2007, 12:12 AM

Unfortunately, there is no other mechanism to invalidate the session other than wait for session timeout when the client crashes.

-eNJay