How can I configure my (embedded) Tomcat Session Timeout in a Spring Boot Application?
public class SessionListener implements HttpSessionListener{
@Override
public void sessionCreated(HttpSessionEvent se) {
se.getSession().setMaxInactiveInterval(5*60);
}
@Override
public void sessionDestroyed(HttpSessionEvent se) {
}}
I have a SessionListener but I have no idea in which class I have to add this Listener to the Context.
server.session.timeout in the application.properties file is now deprecated. The correct setting is:
server.servlet.session.timeout=60s
Also note that Tomcat will not allow you to set the timeout any less than 60 seconds. For details about that minimum setting see https://github.com/spring-projects/spring-boot/issues/7383.
server.session.timeout=1200server.servlet.session.timeout=10mYou should be able to set the server.session.timeout in your application.properties file.
ref: http://docs.spring.io/spring-boot/docs/1.4.x/reference/html/common-application-properties.html
EDIT:
This property has changed in later versions of Spring Boot to server.servlet.session.timeout.
#session timeout (in secs for spring, in minutes for tomcat server/container) server.session.timeout=1 I tested it and is working! It turns out that tomcat take the property in minutes
SessionListener from the original question to the project by adding a @Configuration annotation on top of it. I would then suggest to use the standard property again by binding it with @Value("${server.servlet.session.timeout}") Duration timeout to the SessionListener and using that value with se.getSession().setMaxInactiveInterval(timeout.toSeconds()).What nasezoll suggested worked perfectly. Here's a summary of what I did:
Created a SessionListener:
I implemented a SessionListener class in Groovy that uses the @Value("${server.servlet.session.timeout}") annotation to read the session timeout value from application.yaml. The session timeout is applied by calling setMaxInactiveInterval with the timeout value in seconds.
@Configuration
class SessionListener implements HttpSessionListener {
@Value('${server.servlet.session.timeout}')
Duration timeout
@Override
void sessionCreated(HttpSessionEvent se) {
se.session.setMaxInactiveInterval(timeout.toSeconds().intValue())
}
@Override
void sessionDestroyed(HttpSessionEvent se) {
// No action needed
}
}
Registered the Listener in resources.groovy:
I added the SessionListener as a Spring bean in resources.groovy to ensure it is picked up by the application.
beans = {
sessionListener(SessionListener)
}
Configured Timeout in application.yaml:
I set the session timeout in application.yaml using the following configuration:
server:
port: 8090
servlet:
session:
timeout: 5m # 5 minutes
This approach works perfectly in Grails 5.1.1 and ensures the session timeout is applied correctly.
