We're using Tomcat 8.5.16 with Java 1.8.0_91, Vaadin 7.7.10 and Atmosphere Websockets.

We have had reports of sessions logging out while users are active with our Vaadin-based application. This has been frustrating as we can't seem to track down why Tomcat's session is not being updated, but figure it's something to do with the websockets/push not updating Tomcat reliably.


Our app shows a "last sent to server" timestamp that seems to keep current with user activity, updating as the user clicks on buttons, checkboxes, etc.

We also have a "list of active sessions" screen that shows all active sessions including the HttpSession.getCreationTime() and HttpSession.getLastAccessedTime(). We see it appears as if the last accessed time stops being updated when using simple forms that perhaps update via websockets rather than HTTP requests. Our "last sent to server" timestamp shows each of these clicks updating it, but the HttpSession.getLastAccessedTime() is not updating.

Is there something about push/websockets or anything else that would cause the HttpSession access time not to update? I don't think we have a way to update it ourselves as I believe it's managed by Tomcat itself, but as Tomcat is handling the websocket requests, it's unclear why they are not tied to the HttpSession.

Anybody have any ideas? Thanks as we have a lot of frustrated users who would love for us to find out what's going astray.

David


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to