Hi all,
Currently, session timeout is configured in apps separately, in their per-app web.xml. But as we share session globally, the app which has smallest session timeout will take effect.
Then it is both inconvenient and confusing when trying to alter session timeout value, as values in all web.xml of apps need to be updated.
I think a global web.xml is needed to simplify session timeout configuration.
I have proposed a patch in Jira [1], any comments and suggestions are welcome.
Regards,
Xin Wang
[1]
https://issues.apache.org/jira/browse/OFBIZ-12255