How can an existing session be invalidated?

How can an existing session be invalidated?

Rating:

An existing session can be invalidated in the following two ways:

• Setting timeout in the deployment descriptor: This can be done by specifying timeout between the <session-timeout> tags as follows:
  
  <session-config>
         <session-timeout> 10 </session-timeout>
  </session-config>
  
  This will set the time for session timeout to be ten minutes.
• Setting timeout programmatically: This will set the timeout for a specific session. The syntax for setting the timeout programmatically is as follows:
  
  session.setMaxInactiveInterval(10*60)
  
  In this method, the timeout is specified in seconds. Hence, this will set the time for the session timeout to be ten minutes.

Rating: