Session Timeout

[victropolis@gmail.com]

Is it possible to have different session timeouts for different sessions? (eg. for different users)

Is it possible to change the time out settings programatically (at runtime)?

Thanks!

[Rob Winch]

The session time is controlled by the container (not Spring Security) and by the time the session expires you will no longer know which user it is. The only way I can think of how to do this is to set the session expiration to the largest possible value. Each request you would check the session for the last time the session has been accessed and expire it if it had been too long according to the logged in user.