There are two ways user's HTTP session timeout can be set for your web application.
1. Web.xml
2. Weblogic.xml
More importantly the timeout value set in web.xml takes precedence over weblogic.xml. If you don't set any values in web.xml, weblogic.xml takes over. I think it is better to handle session timeout in web.xml itself since web.xml takes precedence over application server’s deployment descriptors.
No comments:
Post a Comment