PDA

View Full Version : Spring-WS and SessionTimeout



robertoschwald
Nov 26th, 2007, 03:29 AM
I've implemented several Marshalling Endpoints and everything works perfect so far.
The only thing I'm not very happy with is the session creation.
Whenever one hits the Webservice Endpoint, a Session is created.

As a workaround, I implemented a filter and set the session timeout to 1 minute for the endpoint urls.
But I think there is a better solution for this. I already searched the forum and docs but haven't found the right info, yet.
Could someone give me a "best practice" info how to avoid the session creation and possible denial of service problem?

Thanks,
Robert

Arjen Poutsma
Nov 28th, 2007, 11:18 AM
When you mention session, I suppose you mean HTTP session? I am not aware of Spring-WS creating any sessions explicitly, since I never call HttpServletRequest.getSession() any where.

What web container is this?