Because tomcat's sessions will timeout if left unattended long enough regardless of expiration date/time on a cookie.
--David Lung Chan wrote: > I'm pretty new in web design, but why can't you use cookies to > do what you want? > > Will that work?? > > > On 5/25/06, Peter Crowther <[EMAIL PROTECTED]> wrote: > >> >> > From: Vikas Jain [mailto:[EMAIL PROTECTED] >> > I want to persist my session that is the session should >> > continue until user >> > logs out. I don't want to do this task through <session-config> >> > <session-timeout>0</session-timeout> >> > >> > </session-config> >> > >> > in web.xml. >> >> You have no way of telling when a user closes a browser onto your >> application. Given that, and given that you want a session to continue >> until they click 'log out', you have the following alternatives: >> >> - Set an upper limit on the idle time of a session using >> session-timeout, and accept that users who are idle for longer than that >> will lose their session (the timeout could be measured in days); >> >> - Set no upper limit on the idle time, and accept that your server's >> working memory will slowly silt up with abandoned session. >> >> Your choice. Due to the design of HTTP, there are no other options on >> the Web. >> >> - Peter >> >> --------------------------------------------------------------------- >> To start a new topic, e-mail: [email protected] >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > --------------------------------------------------------------------- To start a new topic, e-mail: [email protected] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
