2

In my web application , am annotation based controllers (SPRING MVC). I wanted to implement SessionManagement in my application

1.) Any page within the application should not be idle for 15 minutes

2.) Pop-up should be opened, kind-of notification, at the 10th minute to notify the user abt session expiry and should give him an option to extend the session to another 15 minutes or by default the application should log-off

I believe there must be a simple way for this in spring MVC (I use spring 3.1). Say like, there must be some way to annotate the controller or some configuration in applicationContext.xml. There must be some way ! Friends, please help me by suggesting a way and also would be of great help if you paste any samples here. Also would be of great help if you can guide me step-by-step for this sessionManagement implementation.

Tomasz Nurkiewicz
  • 334,321
  • 69
  • 703
  • 674
Arun
  • 3,440
  • 11
  • 60
  • 108

1 Answers1

3

Spring MVC has little to do here. Suppose you have a session timeout set to 15 minutes. Simply place the following JavaScript code on every page on your site and run it after the page is loaded:

function expireWarning() {
    if(confirm("Your session will expire in 5 minutes, extend?")) {
        $.ajax('/echo/json/');
        setTimeout(expireWarning, 10 * 60 * 1000);
    }
}

setTimeout(expireWarning, 10 * 60 * 1000);

That's it! After 10 minutes pop-up will appear. If the user confirms, AJAX request will be send to the server, automatically extending the session. The counter is then rescheduled to ask the user after another 10 minutes.

Note that the AJAX target on the server doesn't have to do anything. The only purpose of this call is to tell the container that the user is still using this session token.

Another tip: if your site is already using AJAX, you must reschedule the timeout after every call because every AJAX call extends the session as well. If the user stays on the site and triggers a lot of AJAX calls, the session is extended over and over automatically.

Tomasz Nurkiewicz
  • 334,321
  • 69
  • 703
  • 674
  • Thanks Tomoasz. Here you have suggested me on how to generate the pop-up, but my question is how to manage the session on the whole in my application. SessionManagement Implementation am talking about – Arun Jan 12 '12 at 04:25
  • 1
    @Arun: what is missing in my solution? Put this simple code snippet on every page and it handles 2) case completely. The `ajax()` call actually extends the session and if you don't call the server in 15 minutes the session will expire automatically, effectively logging-out the user. – Tomasz Nurkiewicz Jan 12 '12 at 07:55
  • 1
    @Arun what else do you need ? Please be specific . There's nothing special about Spring sessions -It's the same everywhere .These are managed through JSessionID. Are you talking about Login/Logout ? – Aravind A Jan 12 '12 at 07:57
  • Hi Tomasz !! Thanks friend !! it really worked out .. This is exactly what i expected. Sorry for commenting without trying. Am actually new to spring, javascript and to this web-based stuff !! Nice and quick solution gave.. Thanks once again .. :-) – Arun Jan 12 '12 at 15:55
  • @Arun: accepting/upvoting correct answer is the best way to express gratitude on SO ;-). Glad I could help. – Tomasz Nurkiewicz Jan 12 '12 at 16:02