how to check session has been expired in java?

Question

Is there any other way to check expiry of session other than this

session.isNew()

Carl Smotricz · Answer 1 · 2010-01-15T08:15:21.110

31

Yes:

you can call HttpServletRequest.getSession(false) and you'll get a null instead of a session if there isn't one active already.
you can define a lifecycle listener (using HttpSessionListener) in your web.xml. That way you can get notified the moment a session bites the dust.

edited Jan 15 '10 at 08:15

answered Jan 15 '10 at 08:02

Carl Smotricz

66,391
18
125
167

2

+1 for the second suggestion. BTW, its good to name it, so HttpSessionListener is the one. – Adeel Ansari Jan 15 '10 at 08:05
2

Implementing `HttpSessionListener` is the way to go. Just hook on `sessionDestroyed()`. – BalusC Jan 15 '10 at 18:01

score 25 · Answer 2 · edited Feb 28 '13 at 14:10

With session.isNew you can not distinguish expired sessions from entirely new sessions. You can check if the session has expired and/or timed out with:

if (request.getRequestedSessionId() != null
        && !request.isRequestedSessionIdValid()) {
    // Session is expired
}

Use getRequestedSessionId to distinguish between new and existing (valid/expired) sessions, and use isRequestedSessionIdValid to distinguish betwheen valid and new/expired sessions.

You can put this code in a Filter.

how to check session has been expired in java?

2 Answers2

Linked