liferay session not expired after timeout. https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&threadId=112282232 2026-04-05T11:58:37Z 2026-04-05T11:58:37Z David H Nebinger https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&messageId=112283174 2019-02-08T22:42:56Z 2019-02-08T22:42:56Z

There may still be a session in place, but contents might have been wiped.<br /><br />Have you verified if the session contains something you&#39;re worried about?<br /><br />Also if you have set the session.phishing.protected.attributes property in portal-ext.properties, these are carried over when session is created at login and might do it for logout too, although I haven&#39;t tested that.

David H Nebinger 2019-02-08T22:42:56Z Durai pandian https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&messageId=112282231 2019-02-08T20:22:39Z 2019-02-08T20:22:39Z

Hello All,<br />​​​​​​​<br />        I have set the below session configs.<br /><br />session.timeout=15<br />session.timeout.warning=13<br />session.timeout.auto.extend=false<br />session.timeout.redirect.on.expire=true<br />In web.xml the timeout is set to 15. <br /><br />I have created a hook to session_timeout.jspf to set &#34;sessionRedirectUrl&#34; to a public page where the timeout error message displayed.<br /><br />The output I got is very strange. After timeout the user redirected to the expected page but I can see still the session is there. It is not get invalidated.<br />Please help me what I have missed. <br /><br />​​​​​​​Thanks in advance.

Durai pandian 2019-02-08T20:22:39Z