[CXF-7833] Jetty session manager does not invalidate sessions

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.6
• Fix Version/s: 3.2.7, 3.3.0
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Freeman Yue Fang
• Reporter: Ales Dolecek
• Created: 05/Sep/18 11:29
• Updated: 30/Oct/18 10:05
• Resolved: 14/Sep/18 05:42

Description

When using embedded Jetty with sesssion support:<jetty:sessionSupport>true</jetty:sessionSupport>

sessions NEVER expire. This creates memory leak that will lead to OutOfMemoryError if the application runs long enough.

There is also no way to configure Jetty SessionManager - for example set the session timeout.