session.isNew() always return true

[Himalay Majumdar]

The code below is for handling session-timeout issues in our application. The problem is session.isNew() always returns true. I am doing a .getSession(false) and still a new session gets created all the time and so it treats it as timeout all the time. Anyone who can help me understand this. Thank you.

public class SessionTimeoutPhaseListener implements PhaseListener {

    public void beforePhase(PhaseEvent event) {
        FacesContext facesCtx = event
            .getFacesContext();
        ExternalContext extCtx = facesCtx
            .getExternalContext();
        HttpSession session = (HttpSession)extCtx
            .getSession(false);

        boolean newSession = (session == null)
            || (session.isNew());
        boolean postback = !extCtx
            .getRequestParameterMap().isEmpty();
        boolean timedout = postback && newSession;
        if(timedout) {
            Application app = facesCtx.getApplication();
            ViewHandler viewHandler = app.getViewHandler();
            UIViewRoot view = viewHandler.createView(
                facesCtx,
                "/login.xhtml");
            facesCtx.setViewRoot(view);
            facesCtx.renderResponse();
            try {
                viewHandler.renderView(facesCtx, view);
                facesCtx.responseComplete();
            } catch(Throwable t) {
                throw new FacesException(
                    "Session timed out", t);
            }
        }
    }

    public void afterPhase(PhaseEvent event) {
        // Do nothing
    }

    public PhaseId getPhaseId() {
        return PhaseId.RESTORE_VIEW;
    }

}

[Himalay Majumdar]

Anyone?

[Himalay Majumdar]

ok lasttime..anyone?

[Abzee AntiPro]

If the create parameter is true, externalContext creates(if necessary) and return a session instance associated with the current request. If the create parameter is false the externalContext returns any existing session instance associated with the current request, or return null if there is no such session.

Why dont you change your logic a bit and do something like this.

  HttpSession session = (HttpSession) facesContext.getExternalContext().getSession(true);  

This would be the passive way for achieving the same functionality.