APEX 3.1 "Apex Session Timeout"

Hi all,
I have been trying to find out how I can set a session to timeout in APEX 3.1 i.e. 30 minutes. I have reviewed Shared Components etc and haven't been able to find anything to control this timeout value. I am aware of the procedure SET_SESSION_MAX_IDLE_SECONDS but i am unable to find it in any of the wwv_* packages. Is it available in 3.1? If not, how can i set this value? Also, can the timeout value be set per application rather than globally?
Thanks!

Thanks for that (again). So it looks like I have 3 options:
1)     Incorporate a JS timeout script
2)     Build an APEX session package (api_apex_session.pck) that would handle this
3)     Install APEX 3.2 where all this is supported
What about the web server or cookie management...is there anything that could be used there?

Similar Messages

In APEX clicking the hyper link doesn't trigger session timeout page

Hi All,
I have a question about the session time out in APEX application. I have created a simple APEX application. In the SQL report region section, i have code like this:
SELECT DOC_Name, DOC_URL,
'<a href="' || DOC_URL || ' target="_blank"/">Download file</a>' pdf_link
FROM test_table
where emp_number =00010001
When user clicks on the hyper link, it will display the destination page to user(for example if DOC_URL = 'http://forums.oracle.com', it will display the oracle forum page in a new browser).
But the issue is that, after user's session timeout (I set for 240 seconds through Shared Components>Edit Security Attributes, i set max the session timeout for example 240 seconds), when i click on this hyperlink, it doesn't trigger my session timeout page and it still displays the page (oracle forum page).
Why in APEX clicking the hyper link doesn't trigger session timeout page after the user session timeout???
how to implememt or fix to trigger the session timeout page after clicking on the hyperlinks?
(BTW, our APEX version is 3.2)
Thanks!

Hi Lily,
the reason for that behavior is that APEX is not involved anymore if you click on an external link. That's completely handled by your browser.
To involve APEX timeout handling you could redirect to a specific page in your application which performs the final redirect.
For example:
1) Create a new page 999
2) Create hidden page item P999_URL
3) Create a before header PL/SQL process with the following source
owa_util.redirect_url('http://'||:P999_URL);
apex_application.g_unrecoverable_error := TRUE;If you want to embed a link, create a link to page 999 and set the page item P999_URL to forums.oracle.com
You could also add a white list into the above code to verify that you are just redirecting to valid URLs, so that nobody is using your trusted application URL for phishing attacks.
Hope that gives you a direction
Patrick
Regards
Patrick
My Blog: http://www.inside-oracle-apex.com
APEX 4.0 Plug-Ins: http://apex.oracle.com/plugins
Twitter: http://www.twitter.com/patrickwolf

Apex Version 4.2: Why doesn't the session timeout parameter settings work?

Prior to an upgrade to Apex Version 4.2.0.00.27, we ran Apex Version 4.1 in our environment. This is on a platform using Oracle Database Enterprise Edition 11g R2 on Windows Server 2008. The session timeout parameters (set for a single application using "Shared Components" -> "Security Attributes") were set to the following:
Maximum Session Time: 1 day
Maximum Session Idle Time: 8 hours
This worked with no problems in Apex 4.1; our user would leave a data entry form open for several hours, complete the data entry then submit the page. Now, with the upgrade to Apex 4.2, doing the same thing causes the system to redirect to the login page and aborting any edits or new data entered into the form previously.
I have tried to set both session parameters to ZERO (0) which is what the documentation explains is the equivallent to "no timeout" but that didn't work as well.
I have reset the session control parameters to what they were before the upgrade and my session times out before the time values I set. (on the version 4.2 upgraded instance).
Why was the session timeout parameters I set ignored by the system? Can anyone else out there confirm/repeat the problem I observed?

Hi Richard,
You probable have it ok, but the time should be in seconds.
Kees

How to create an apex session in e.g. SQL*Plus?

I would like to establish an apex session using a tool different from SQL Workshop.
How can I achieve this using e.g. SQL*Plus or SQL Developer?
Is there some document on the internet which addresses this question? I couldn't find it yet.

First and foremost you need to set the Security Group ID (SGID)
begin
APEX_UTIL.SET_SECURITY_GROUP_ID(APEX_UTIL.FIND_SECURITY_GROUP_ID('MY_WORKSPACE')); -- replace MY_WORKSPACE with yours
end;
then you might need to set an application_id for certain features to work:
select application_id
    into apex_application.g_flow_id
    from apex_applications
   where application_name = 'my_app_name'; -- replace my_app_name with yours
If you need to create a session id, you can get a fresh one with
DECLARE
VAL NUMBER;
BEGIN
VAL := APEX_CUSTOM_AUTH.GET_NEXT_SESSION_ID;
END;
Flavio
http://oraclequirks.blogspot.com
http://www.yocoya.com

Want to get ApEx session in JSP

Hi Pals,
From my ApEx application, I am calling a JSP by providing a direct URL.
THe JSP does some specific function here.
If the user get the JSP url by right click and view source, they can very well use this outside my ApEx application.
I want to apply security like, the JSP url only works inside my ApEx application.
My thought, if I can share ApEx session with JSP session I can impose the security check in JSP level.
Any idea would be appreciable.

Hi,
Im using below method to call jsp page and passing UserName, application id and Session as
<iframe src="http://apex.oracle.com/pls/otn/...javaapplication.jsp?userId=&USER.&appId=&APP_ID.&sessId=&SESSION."></iframe>
Vailidation is done against the table "wwv_flow_sessions$" of schema : flows_030100 ,whether those values are exist in table.
But if user is already logged into apex application, he can run the jsp independantly taking the url from "view source".
Im also looking for more solid validation
Regards,
Benz

Anyone created an apex session in a plsql procedure in 4.1

Hi all,
Was wondering if anyone has been able to create a procedure that creates an apex session that allows using collections after upgrading to 4.1
Our procedure which we used for nightly processing worked fine in 4.0.1 is no longer working after upgrading.
Thanks for any suggestions or help
Wayne
We were using:
htp.init;
l_cgivar_name(1) := 'REQUEST_PROTOCOL';
l_cgivar_val(1) := 'HTTP';
owa.init_cgi_env(
num_params => 1,
param_name => l_cgivar_name,
param_val => l_cgivar_val );
for c1 in (select workspace_id from apex_applications where application_id = l_application_id) loop
l_workspace_id := c1.workspace_id;
dbms_output.put_line('l_workspace_id:'||l_workspace_id);
end loop;
wwv_flow_api.set_security_group_id(l_workspace_id);
apex_application.g_instance := 1;
apex_application.g_flow_id := l_application_id;
apex_application.g_flow_step_id := 999;
wwv_flow_custom_auth_std.post_login(
p_uname => l_user,
p_session_id => null,
p_flow_page => apex_application.g_flow_id||':'||999);
wwv_flow.show (
p_flow_id => apex_application.g_flow_id,
p_flow_step_id => apex_application.g_flow_step_id,
p_instance => apex_application.g_instance,
p_request => 'FSP_SHOW_POPUPLOV'
execute procedure_XXXX (this procedure contains the code to create an apex collection)

Not for sure how I did it, but the user handle should have been wcoleku.
Wayne

What is an APEX session? Where is it documented?

Exactly what defines an Oracle APEX session? Is it documented somewhere? (I can't see blogs because they filter them out here.)
I ask because I find global variables persisting when I've logged out of APEX and logged back in again. Connectivity is "hit and miss" here. So I often duplicate browers tabs (sessions?) which are timing out. I'm wondering if that's not leaving disconnected session(s) that I log back into. I noticed that the initialization process ("on new session") is not executing, so I presume when I log back in I'm not starting a new session.
Thanks -- Howard

Hi,
This might help
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21674/concept_ses.htm#sthref103
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21674/concept_ses_val.htm#sthref124
I ask because I find global variables persisting when I've logged out of APEX and logged back in again. Connectivity is "hit and miss" here. So I often duplicate browers tabs (sessions?) which are timing out. I'm wondering if that's not leaving disconnected session(s) that I log back into. I noticed that the initialization process ("on new session") is not executing, so I presume when I log back in I'm not starting a new session. Can you create some example to apex.oracle.com to demonstrate what you mean?
Regards,
Jari
My Blog: http://dbswh.webhop.net/htmldb/f?p=BLOG:HOME:0
Twitter: http://www.twitter.com/jariolai

Trace Apex session from sqlplus

Hi,
Apex 4.2.4, Oracle 11.2.0.3, Apex Listener 2.0.5
How to start Apex session trace from sqlplus command line? I know thread Trace with &p_trace=YES but this is not a solution because I want to start from sqlplus (PL/SQL code).
Any help?
Brg
Damir

Your question has changed.
Your question now: "How do I identify a session in the database that belongs to an APEX page?"
Use the session tables to match your APEX connection to the information in the gv$session table.
Yes - this is a "free" information in the database, but it is also secure. You will need elevated privileges to do this. Use with caution.
You will not find a PLUG-IN that can do tracing if the base user can not do tracing. The reason the URL feature is there from APEX is because APEX (the framework) has the access and ability - but that is not passed down to each workspace / schema without using the framework.
I have no details of your installation or your application, so you will need to determine what types of calls are being made to the database and with what method (EPG, OHS, ORDS, etc..)
select SID, SERIAL#,inst_id,program,module,event,Action,machine, client_info, CLIENT_IDENTIFIER
from gv$session s where type!='BACKGROUND'
and status='ACTIVE' and sql_id is not null;
The CLIENT_IDENTIFIER will show you SESSION and USER
The MODULE will show you APP and PAGE
From there, you can do all your SID related tracing you need.

APEX sessions at 2008 Oracle Open World 9/21 - 9/25?

I looked for but could not find a public posting of APEX sessions scheduled at Open World next week to pass along to an associate who will be attending - something like [this resource from http://dgielis.blogspot.com|http://apex.oracle.com/pls/otn/f?p=39802] would be great. Thanks in advance for any direction on this anyone may be able to provide, GR

Hello,
David Peake posted something on his blog a while back when he created an Apex app listing the Apex sessions -
http://dpeake.blogspot.com/2008/08/oracle-openworld-2008-apex-update.html
http://apex.oracle.com/pls/otn/f?p=338:1:0
Hope this helps,
John.
http://jes.blogs.shellprompt.net
http://www.apex-evangelists.com

What is killing my Apex Session?

Hi,
as far as I understand it, the Session lasts 24 hours after the last submit? I can shut down the DB or the Apache and after I have them up again my session is still valid. I can also work on the next day with my session. But at least once a day suddenly my sessions are gone and I have to reconnect.
Can anyone explain this behaviour?
Thanks, Juergen

Also, there is nothing magic about 24 hours, feel free to modify that DBMS_JOB to increase or decrease this frequency as appropriate for your environment.
Remember that in most cases, the Apex session is tied back to a specific (browser-session) cookie, chances are that your client machine and/or browser is likely to be rebooted/restarted long before 24 hours so this issue is moot anyway.

Is Collection APEX session specific

I think I know the answer to this but I want to be 100% sure. My application uses a collection that gets populated and is then the source SQL for the region. What happens if two users are running the applicaiton at the same time? Will I run into any problems, or is a colleciton local to each specific Apex session?
Thanks!

Hi,
Yes, collection is application and session specific
Regards,
Jari
Edited by: jarola on Oct 28, 2010 8:05 PM
>
Collections enable you to temporarily capture one or more nonscalar values. You can use collections to store rows and columns currently in session state so they can be accessed, manipulated, or processed during a user's specific session. You can think of a collection as a bucket in which you temporarily store and name rows of information.
>
http://download.oracle.com/docs/cd/E17556_01/doc/apirefs.40/e15519/apex_collection.htm#CACFAICJ

Session Timeout and Dynamic Actions

Did anybody ever use the Session Timeout feature in APEX successfully?
I have set an idle session timeout and provided an url to redirect to once the session is expired: Home > Application Builder > Application nnn > Shared Components > Edit Security Attributes > Session Timeout
It works so far during the page rendering and page processing phase. But I have major problems with dynamic actions and custom ajax requests.
Dynamic actions will just hang and simply don't return. Even worse, when I execute the dynamic action once the session is expired, the session seems to be physically deleted and thus the next click on a tab will not redirect to the expiration page but go straight to the login page.
Did anybody make it work or is the best way to implement a custom session timeout?
Thanks,
Dietmar.

Hi All,
Check out the Session Timeout plug-in available here:
http://skillbuilders.com/plugins
Let me know if that helps.
Regards,
Dan
blog: http://DanielMcghan.us/
work: http://SkillBuilders.com/APEX/

Session Timeout and DAD Authentication

My application uses the authentication scheme 'No authentication (using DAD)'. The users log in from an external program and the user IDs are captured in the variable remote_user. My authorization scheme checks that the user ID exists in a database table. All this seems to work fine.
However, I need to implement a session timeout on the application. I've followed the steps described in the "Automatic Session Timeouts" utility in the Application Express Studio but when I tried to modify the authentication scheme by adding:
return auth_pkg.check_timeout;
to the Session Verify Function I got the following errors:
No functional attributes may be set when page sentry function is '-DATABASE-'.
and
Session verification function may not be specified if page sentry function is specified.
I'm new to Apex and I don't know where to go from here. Any advice please?
Thanks
Maria

Maria,
The usual way to do the authentication part is to use a custom page sentry function. Many examples have been posted on the forum based on the ntlm page sentry code. Search for those keywords here (ntml page sentry) and you should find it easily. Then you can modify it by adding the session timeout logic in that function.
Scott

Sso session timeout per partner application

Hello,
I was just wondering if it is possible to configure SSO session timeouts per partner application? I'm looking to log out users of a particular application after 15 minutes, but don't want this change to affect any of my other SSO enabled applications. Is this possible?
Thanks,

Hi,
I do not think so, you can not specify specail parameter for one application in SSO.
Why because SSO is one component (within your Infra) through which you logon different apps.
Another solution may be it will expensive is that you 'll need to use different infra for this specific application.
Regards,
Hamdy

Session Timeouts and SmbServer

Hi,
When having iFS mapped to a network drive (via SMB), the SMB server
is unable to recover from a timeout of the LibrarySession. The network
drive then seems to be empty and doing a refresh within explorer
doesn't help either. The only thing that helps, is remapping the
network drive.
Within Node.log of iFS I see this stacktrace.
7/10/02 9:02 AM SmbServer: oracle.ifs.common.IfsException
oracle.ifs.common.IfsException: IFS-21000: Session is not connected or has timed-out
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Compiled Code)
at oracle.ifs.common.IfsException.<init>(Compiled Code)
at oracle.ifs.common.IfsException.<init>(Compiled Code)
at oracle.ifs.common.IfsException.<init>(Compiled Code)
at oracle.ifs.beans.LibraryObject.verifyConnected(Compiled Code)
at oracle.ifs.beans.Folder.findPublicObjectByPath(Compiled Code)
at oracle.ifs.beans.FolderPathResolver.findPublicObjectByPath(Compiled Code)
at oracle.ifs.beans.FolderPathResolver.findPublicObjectByPath(Compiled Code)
at oracle.ifs.protocols.smb.server.DbTree$DbQuery.<init>(Compiled Code)
at oracle.ifs.protocols.smb.server.DbTree.getQuery(Compiled Code)
at oracle.ifs.protocols.smb.server.ComTrans.trans2FindFirst(Compiled Code)
at oracle.ifs.protocols.smb.server.ComTrans.replyTransaction2(Compiled Code)
at oracle.ifs.protocols.smb.server.ComTrans.process(Compiled Code)
at oracle.ifs.protocols.smb.server.ComSmb.handleSmbMessage(Compiled Code)
at oracle.ifs.protocols.smb.server.SmbThread.handleNbMessage(Compiled Code)
at oracle.ifs.protocols.smb.server.SmbThread.readPackets(Compiled Code)
at oracle.ifs.protocols.smb.server.SmbThread.run(Compiled Code)
This behavior actually causes us big problems when editing files via MS Office.
Fortunately Office is able to still save it's data using some generated filename.
(At least until now I could not create any data loss)
But then you have to close it, remap then network drive, rename the file and then
reopen the file. This is big trouble to users, which are not familiar with mapping
network drives and renaming files with extensions.
Is there a way to make the SmbServer keep the LibrarySession alive, as long as
the network drive is mapped ?
Regards,
Jens Lorenz

Workflow #2:
Login to my account
Click view all email
Open Drafts Folder
Open draft email response
Select "Send" to send email (total in session time of 30 seconds)
On screen reload, where I would expect to see some sort of indication that my email was successfully sent, instead the system throws session time out message and kicks me out.
I have no idea if my email was successfully sent or not.
Workflow #3:
Login to my account
Click view all email
Attempted to open the first new email in my inbox (total time in session <15 seconds)
System throws session timeout error and kicks me out to the main login.
There is obviously something going on with your session holding code. The session variable is not being passed correctly or something but it's very, very frustrating to spend 30-45 minutes trying to type out a couple of lines, particularly when you have multiple important activities going on that you need to respond too via email.

APEX 3.1 "Apex Session Timeout"

Similar Messages

Maybe you are looking for