2 Inconsistencies in session-timeout and setMaxInactiveinterval

[Sandeep Vaid]

There are 2 inconsistencies in the way the session-timeout tag of the DD and setMaxInactiveInterval() method of HttpSession work :

1. The session-timeout value is specified in minutes, while the setMaxInactiveInterval() method accepts seconds.

2. A session-timeout value of 0 or less means that the session will never expire, while if we want to specify that a session will never expire using setMaxInactiveinterval method, a negative value (not 0) is required.

Is the second statement correct?
I think we can test it and see but what's your answers ?

[Tridib Samanta]

Correct.

[Christophe Verré]

setMaxInactiveInterval :
-> A negative time (in seconds) indicates the session should never timeout.
session-timeout :
-> If the timeout is 0 or less (in minutes), the container ensures the default behaviour of sessions is never to timeout.

[Sandeep Vaid]

Thanks. it's True. i verified it ...