How to redirect to Login page when Session is expired in Java web application?

by

You could use a Filter and do the following test:

HttpSession session = request.getSession(false);// don't create if it doesn't exist
if(session != null && !session.isNew()) {
    chain.doFilter(request, response);
} else {
    response.sendRedirect("/login.jsp");
}

The above code is untested.

This isn’t the most extensive solution however. You should also test that some domain-specific object or flag is available in the session before assuming that because a session isn’t new the user must’ve logged in. Be paranoid!

Leave a Comment