I need handle all user sessions in struts2 like tomcat manager application

[vikas byn]

I need handle all user sessions in struts2 like tomcat manager application

[E Armitage]

What do you mean 'handle'? Also, what have you tried and where are you stuck?

[vikas byn]

I want to invalidate some sessions if certain situation occurred.

[E Armitage]

You can call SessionMap.invalidate http://struts.apache.org/release/2.0.x/struts2-core/apidocs/org/apache/struts2/dispatcher/SessionMap.html#invalidate()

[vikas byn]

E Armitage wrote:You can call SessionMap.invalidate http://struts.apache.org/release/2.0.x/struts2-core/apidocs/org/apache/struts2/dispatcher/SessionMap.html#invalidate()

It will invalidate only current session not others.

[E Armitage]

Then you can create an HTTPSessionListener and add all started sessions to a collection. You can then iterate all of them to invalidate them when you want to.

[vikas byn]

E Armitage wrote:Then you can create an HTTPSessionListener and add all started sessions to a collection. You can then iterate all of them to invalidate them when you want to.

it may cause memory leaks. it can store that session in which user just hit page not logged in and keeps its reference for always.

[Ulf Dittmer]

Obviously, you would also implement sessionDestroyed to remove sessions from your list when they expire.

it can store that session in which user just hit page not logged in

Do you really need to create a session for a user that is not logged in? (Not that it has anything to do with the problem at hand.)

[vikas byn]

I am looking into code to check when session created. Actually class used SessionAware interface when User logged in.

I am just thinking If user logged in and keep it to expire then we unfortunately store it also.

Is there is any Listener that will listen event of expire session?

[E Armitage]

vikas byn wrote:I am looking into code to check when session created. Actually class used SessionAware interface when User logged in.

I am just thinking If user logged in and keep it to expire then we unfortunately store it also.

Is there is any Listener that will listen event of expire session?

The HtttpSessionListener does that.