Skip to main content
Version: 3.14.x.x LTS

SessionResourceFilter

As a rule, the maximum lifetime and the maximum inactive interval of a HttpSession are configured in the HttpSession configuration . However, if the maximum lifetime and/or maximum inactive interval have to be configured on a per-URL basis, this can be done in the SessionResourceFilter.

When used in combination with an IdentityCreationFilter, the mapping of the SessionResourceFilter must be configured before the mapping of the Identity-CreationFilter.

Classname
ch::nevis::isiweb4::filter::resource::SessionResourceFilter
Library
libResourceFilters.so.1

Configuration

NameType, Usage Constraints, DefaultsDescription
InactiveIntervalinteger; optional, basic; default: noneDefines the maximum inactive interval of the HttpSession on a per-location basis.
InactivePolicyenum: current, peak; required, advanced; default: currentThe attribute 'InactivePolicy' is used to configure how 'InactiveInterval' is checked: current: 'InactiveInterval' is checked against the interval since the last access. peak: 'InactiveInterval' is checked against the peak inactive interval seen over the whole session. This also includes past inactive intervals measured by other SessionResourceFilters with the same StateKey.
MaxLifeTimeinteger;; optional, basic; default: noneDefines the maximum lifetime of the HttpSession on a per-location basis.
ReauthIntervalinteger; optional, basic; default: noneDefines the maximum inactive interval of the HttpSession before a reauthentication is triggered.
ReauthPolicyenum: current, peak; required, advanced; default: currentThe attribute 'ReauthPolicy' is used to configure how 'ReauthInterval' is checked: current: 'ReauthInterval' is checked against the interval since the last access. peak: 'ReauthInterval' is checked against the peak reauth interval seen over the whole session. This also includes past inactive intervals measured by other SessionResourceFilters with the same StateKey.
StateKeystring; optional, advanced; default: ch::nevis::isiweb4::filter::resource::SessionResourceFilter.<FilterName>If the same value for the attribute StateKey is configured for two or more SessionResourceFilters, they share LastAccessTime and PeakInactiveInterval. As a result, several filters with different settings operate on the same data.