Session Timeout If Login Page is Idle even before logging in

[changu mani]

Dear All,
I need your advice on how to go about solving the below mentioned issue.
We have an E-Banking application.
Issue :

Customer clicks on E-Banking URL and enters neither userid nor pwd. He lets it idle for 20 minutes. After 20 minutes, if he tries to login through the same page, the page gets expired. What could be the possible reasons for this issue? I'm not sure what needs to be checked here since it just happens on click of submit on Login URL if it is idle for more than 20 minutes.

Do I need to check at websphere(settings) or browser level or dig into application code?

Please help


Thanks in Advance!

[Campbell Ritchie]

That sounds normal behaviour for e‑banking. You should have time-outs on everything and log users out automatically for idle time.

I don’t think that is a Java‑specific question, so it would fit better on a different forum. Let’s try one for fit