ICEfaces
  1. ICEfaces
  2. ICE-6077

Configurable session timeout enforcement

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 2.0-Beta1
    • Fix Version/s: 2.0-Beta2, 2.0.0
    • Component/s: Framework
    • Labels:
      None
    • Environment:
      ICEfaces
    • Affects:
      Documentation (User Guide, Ref. Guide, etc.)

      Description

      In some cases, push activity alone should not be considered session activity, and the session timeout should occur if the user has not been active within the configured session timeout. To implement this, ICEfaces must inspect incoming requests and invoke

      externalContext.invalidateSession();

      when the session is deemed inactive. This can interfere with applications that contain a mixture of ICEfaces and non-ICEfaces pages and can result in dashboard-type applications being disconnected unexpectedly.

        Activity

        Hide
        Ted Goddard added a comment -

        Additional APIs should be added to allow the application to determine when the last user event and last push update has occurred.

        Show
        Ted Goddard added a comment - Additional APIs should be added to allow the application to determine when the last user event and last push update has occurred.
        Hide
        Ted Goddard added a comment -

        It should also be configurable whether an active push connection is sufficient to keep the session alive (even if no page updates have occurred within the timeout interval).

        Show
        Ted Goddard added a comment - It should also be configurable whether an active push connection is sufficient to keep the session alive (even if no page updates have occurred within the timeout interval).
        Hide
        Ted Goddard added a comment -

        Verified with auction. It may be desirable to add the strictSessionTimeout config to auctionMonitor.

        Show
        Ted Goddard added a comment - Verified with auction. It may be desirable to add the strictSessionTimeout config to auctionMonitor.

          People

          • Assignee:
            Ted Goddard
            Reporter:
            Ted Goddard
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: