[SOLVED] logout user when session expires

[sanjeevtarar]

Hi All,

I have developed a web application. In which i want to add logout functionality. For this i used HttpSessionListener, but not working as i wanted.

I marked user logout in sessionDestroyed() method(by updating Database).

If session is timeout then container calls the sessionDestroyed() method and i update the Database but when i explicitly call session.invalidate() (when user click on logout link)values are unbind from session object but container does not call sessionDestroyed() method so not able to update database.

and also need to logout user when user closes browser window.


Please give your valuable idea on the same.

sanjeev

[sanjeevtarar]

Hi Dear all,

I got the solution itself.

Thanks for your time.


sanjeev

[javarishi]

Hei Sanjeev Can you please explain how you did it?

[sanjeevtarar]

I implemented HttpSessionListener interface and there are two methods

sessionDestroyed() and sessionCreated(). Nothing to do with session created.
I just updated database in sessionDestroyed() method, and i will be called by container just before session.invalidate() is called.

and added the listener entry into web.xml file.

There are three chances from where user can be marked as logout.
1. Session timeout by container.
2. User clicks on Logout link
3 User close the browser window.

In First case Listener is called by Container and Database is updated.
In second case i called a servlet that do the session.invalidate() and calles a method to update Database.
In 3rd case : When user closes the browser window i called the same servlet from scripts and updated the Database


If still you have any doubts the please feel free to ask anything.


sanjeev

[javarishi]

Hei Sanjeev,
My doubt is why are you updating each time the database

when Session Expires? Can You Please Explain?

[sanjeevtarar]

Not each time dear....just one time from any one of three condition....for particular one user.


sanjeev

[javarishi]

Ok,
That means you are tracking active users of app and storing to db?

[sanjeevtarar]

Ya exactly,


we need to track only users who are logged in.


sanejev

[javarishi]

OK sanjeev,
Thank you.

[Eranga]

Sanjeev, I have one question.

You are talking about three chances which can be caused to user logout. Fine. How did you check the port. Is there any service is implemented by you to check that port is available.

It can be a cause, if the user have firewall used, isn't it?

[sanjeevtarar]

Hi Eranga,

How did you check the port. Is there any service is implemented by you to check that port is available.....?

Why i should check for port..?

If i am wrong or there is another way from user can be logged out please correct me.


sanjeev

[Eranga]

Quote:

Originally Posted by sanjeevtarar

If i am wrong or there is another way from user can be logged out please correct me.

No Snjeev, I'm not talking about user logged out in the normal way. What I mean there is, if the large number of user are online/available at the same time, there can be a clash in the communicating port. As a result port can be closed. So it can be a real advantage to check the port periodically.

Why I'm asking this is, using Java I never do this. All time I used .Net services fro that. It's so simple.