(...) I did try to do this starting with a simple example i.e. a listener which only counts the active sessions. This works quite well now but i noted that a logut did not invalidate the session (meaning that if a user did log out i still had the same number of sessions). The reason is that session.invalidate(); is not called in logout.xsp. If i add it to login.xsp:
<xsp:content><uri><xsp-request:get-context-path/><xsp:expr>uri</xsp:expr></uri></xsp:content> } } + session.invalidate(); } </xsp:logic> </logout>
i got the proper number of sessions. Is this a bug or is session.invalidate not called on purpose?
IMO it makes sense to explicitly call session.invalidate() on logout.
Note that in any case the session will be invalidated upon session timeout, so your listener would still be notified even if logout did not call invalidate. It's just that the notification happens later.
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
