187 How to invalidate / inactive the session HttpSession object | Session Handling Tracking Servlet

Question: How to invalidate/inactive the session/HttpSession object?
-----------------------------------------------------------
(If any object is inactive or not in use then it will be collected by garbage collector)

Answer:
- Invalidating the session is nothing but closing the session between browser window and web application(like sign-out/log out operation)

- In this process the HttpSession object of browser window on the server bcomes inactive obejct and ready for garbage collection.

1. When browser window is closed.
When browser window is closed the in-memory cookies that holds Session-id will be destroyed. Due to this the HttpSession object on the server for that browser window becomes invalidated object.

2. When web resource programs[Servlet/JSP programs] calls session.invalidate() method.

3) When HttpSession object/session completes maximum inactive interval/session idle time out period.
a) Programmatic Approach (Java Code):
session.setMaxInactiveInterval(1800);
1800 Seconds(30 Minutes) Time
b) Declarative approach (XML Code): web.xml file
web-app
session-config
session-timeout30 /session-timeout
/session-config

/web-app

Here session-timeout30/session-timeout30 indicate in Minutes.


Maximum inactive interval period/idle timeout period of session is nothing but how much maximum time that session can be there in idle state contineously.

- In most of the web servers the default maximum inactive intervals idle time out period of session 30 Minutes(1800 Seconds) by defualt.
Eg. In Tomcat Manager every web applicaiton has session time =30 Minutes.