Session doesn't expire

Question

I am tring to use the getLastAccessedTime() to time out a session, but looks like this method return the current system time instead of lastaccess time, here is the code, please help.
Thanks,
ruirui
HttpSession session = request.getSession(true);
java.util.Date created = new
java.util.Date(session.getCreationTime() );
java.util.Date FifteenMinAgo = new
ava.util.Date( System.currentTimeMillis() - 60*60*1000/4 ) ;
java.util.Date accessed = new
java.util.Date(session.getLastAccessedTime() );
out.println("session id="+session.getId());
out.println("New session:" + session.isNew());
out.println("creation time:" + created);
out.println("last access time="+ accessed);
out.println("fifteenMinAgo="+ FifteenMinAgo);
if (accessed.before(FifteenMinAgo)) {
out.println("More than 15 Minutes inactive, invalidated!");
session.invalidate();
return;

Answer 1

I use this code in my servlet app. and it works fine to me.
But in your case it seems you create a new session everytime you make your check:
...getSession(true)...
try:
...getSession(false)...
this will ensure that you're dealing with the same session everytime.
long maxTime = 0; //time before session expiration
long laTime = 0; //lastAccessedTime
long actTime = 0; //current Time
long iaTime = 0; //inactive Time
try{                          maxTime = Long.parseLong(System.getProperty("catalina.logoutTime").toString());;
laTime = request.getSession(false).getLastAccessedTime();
actTime = new java.util.Date().getTime();
iaTime = (actTime - laTime)/1000;
if(iaTime > maxTime){
sessionInactive = 1;
request.getSession(false).setAttribute("vesabError","session expired.");
RequestDispatcher dispatcher = getServletContext ().getRequestDispatcher("/index.jsp");
dispatcher.forward(request,response);
}catch(Exception Ex){
System.out.println("Exception...: " + Ex);
/Rickard