SessionResourceFilter

Deprecated

The SessionResourceFilter has been deprecated with the deprecation of the legacy session management.

As a rule, the maximum lifetime and the maximum inactive interval of a HttpSession are configured in the HttpSession configuration . However, if the maximum lifetime and/or maximum inactive interval have to be configured on a per-URL basis, this can be done in the SessionResourceFilter.

When used in combination with an IdentityCreationFilter, the mapping of the SessionResourceFilter must be configured before the mapping of the Identity-CreationFilter.

Classname

ch::nevis::isiweb4::filter::resource::SessionResourceFilter

Library

libResourceFilters.so.1

Configuration

Name	Type, Usage Constraints, Defaults	Description
InactiveInterval	integer; optional, basic; default: none	Defines the maximum inactive interval of the HttpSession on a per-location basis.
InactivePolicy	enum: current, peak; required, advanced; default: current	The attribute 'InactivePolicy' is used to configure how 'InactiveInterval' is checked: current: 'InactiveInterval' is checked against the interval since the last access. peak: 'InactiveInterval' is checked against the peak inactive interval seen over the whole session. This also includes past inactive intervals measured by other SessionResourceFilters with the same StateKey.
MaxLifeTime	integer;; optional, basic; default: none	Defines the maximum lifetime of the HttpSession on a per-location basis.
ReauthInterval	integer; optional, basic; default: none	Defines the maximum inactive interval of the HttpSession before a reauthentication is triggered.
ReauthPolicy	enum: current, peak; required, advanced; default: current	The attribute 'ReauthPolicy' is used to configure how 'ReauthInterval' is checked: current: 'ReauthInterval' is checked against the interval since the last access. peak: 'ReauthInterval' is checked against the peak reauth interval seen over the whole session. This also includes past inactive intervals measured by other SessionResourceFilters with the same StateKey.
StateKey	string; optional, advanced; default: ch::nevis::isiweb4::filter::resource::SessionResourceFilter.<FilterName>	If the same value for the attribute StateKey is configured for two or more SessionResourceFilters, they share LastAccessTime and PeakInactiveInterval. As a result, several filters with different settings operate on the same data.