session timeout with spring mvc and acegi

[Paul Jacob]

Hi,
I want to know the best way to handle session timeout with acegi/spring mvc. I tried using the concurrentsessionfilter from acegi and added some code to also check for session timeout, but since it is the first filter that is called, there are a lot of customizations needed and it is not straight forward at all. Below is what I added :

   
                                                  if (session == null || StringUtils.isBlank(httpRequest.getRequestedSessionId()) || !httpRequest.isRequestedSessionIdValid() )
			   {
				   // check if session control is required. excludes are for login page, timeout page etc.				   
				   if (isSessionControlRequired(httpRequest.getRequestURI()))
				   {
					   redirect = true;
					   paramValue = "e"; 
					  log.info(methodName, "Session has expired.");
				   }
			   }
			   else 			   {
                                                               // acegi original code for concurrent session handling
                                                   }