Hi wquraishi,

Thanks a lot for your reply. However, I am using exactly the same configuration as yours.

My question is how to differ session timeout from a newly created session. If I bookmark a page requiring login, it is desired that the application redirects me to the login page and the message "Please log in first" is fine. However, if I have been inactive for a while thus my session times out, it is preferred to display a message like "Your session times out. Please login again".

Is this possible with Seam?

Thanks,
Sheng

Good afternoon Jacob,

Thanks a lot for the reply. I followed your suggestion but still have a problem. That is, I cannot add a message to be displayed on the logon page.

In my components.xml,




In my AuthenticatorAction, I have
public void sessionExpired() {
FacesMessages.instance().add("Your session is expired, please login again");
}

I got an warning and the message is not displayed. I also tried to inject facesMessages
@In(create=true)
FacesMessages facesMessages;
Then use
facesMessages.add("Your session is expired, please login again");
Then I got another warning saying facesMessages cannot be null. I checked the forum and one user says facesMessages is not available at the RESTORE_VIEW phase.

Could you give me more information regarding how to make this work or there is a possible workaround? Thank you very much for your help.

Have a nice day!

Best regards,
Sheng

Sorry that don't know why some contents do not get displayed.
My components.xml is as follows:




Thanks,
Sheng

Sorry in my components.xml, I have the following setup:
event type="sessionExpired"
action expression="#{authenticator.sessionExpired}"

Thanks,
Sheng

Good morning Jacob,

Thanks a lot for the suggestion again. It is nice to have a work-around before a clean solution is implemented by the Seam development team. And I have learned a lot about JSF phases and Seam messages/facesMessages with your code.

Now I have the message displayed correctly when a user's session is expired. However, it seems that the PhaseListener also raises the session expiry event when a user logout. My goal is to differ these two scenarios. Is there a way to raise two different events with the PhaseListener?

By the way, my implementation is as follows:



Code:



1. AuthenticatorAction
public void sessionExpired() {
user.setMessage("user.session.timeout");
}
Where user is a session scope variable. This serves as the appropriately scoped message component you mentioned.

2. pages.xml
<page view-id="/security/login.xhtml">



....



3. AuthenticatorAction
public void displaySessionExpiredMessage() {
if (user != null){
if (user.getMessage() != null) {
FacesMessages.instance().addFromResourceBundle(user.getMessage());
}
user.setMessage(null);
}
}





Thank you very much for your help and have a nice day.

Best regards,
Sheng