Session timeout and recreating session

[itg-assistant]

Tobias asked 2017-11-02 13:27:20 UTC

I'm about using WiseJ to create a multiuser application published on the Internet.
It has a login page where I redirect the users to once Application_SessionTimeout occurs. In this case I exit the app and create a new login form. So far so good.

What I want to prevent is to have multiple active but unused server sessions because of browsers which have the login page displayed but are not (currently) in use.

Therefore I have two solutions in mind:

• In case of timeout/application exit instead of creating a new login form (and a new session !) I display a html message stating the page has to be reloaded. In this case I think I don't have to care about multiple unused sessions.

• The way I would prefer - but not sure if this is possible - I display the login form again in the browser but kill the session ! The user should be able to see the form and only when he clicks on "Login" a new session should be (re)created.

Maybe you can tell me if the second option is possible to realize with WiseJ ?

Thank you.

[itg-assistant]

Luca answered 2017-11-02 19:32:41 UTC

When you get the session timeout, the session is about to timeout, it hasn't timeout yet. If you want to "kill" the session use Application.Exit(). It will cause the session to get disposed and removed from the session manager. Or, after the real session timeout (which is the session timeout se in default.json * 2), the session is removed automatically. Session don't remain in memory more than sessionTimeout * 2.

You can also implement a custom IWisejCacheProvider by implementing Wisej.Core.IWisejCacheProvider and adding the fully qualified class name as an application key in web.config using  "Wisej.CacheProvider" as the key.

[itg-assistant]

Tobias answered 2017-11-02 20:28:16 UTC

Thanks for your answer. But I have no idea what I can do with "IWisejCacheProvider". Is there more documentation about it somewhere? Do you think option 2 would be possible to implement with this?

[itg-assistant]

Luca answered 2017-11-02 21:06:31 UTC

You can kill the session calling Application.Exit. Once the session is killed, the server only sends back to the client the information that the session is gone. You can't have a control without a session. The client cleans up everything and calls Wisej.onExit() on the global Wisej object.

You can assign your code in onExit and decide what to do. To reload the page and create a new session, which will show a new login scree, simply to do this:

http://wisej.com/support/question/how-to-show-a-logout-page-after-application-exit

This is the reference for IWisejCacheProvider.

http://wisej.com/docs/html/T_Wisej_Core_IWisejCacheProvider.htm

It is not related to this functionality. It's useful only if you want to use a different cache manager. By default Wisej uses HttpRuntime.Cache.