Set session timeout in Weblogic

There are two ways user’s HTTP session timeout can be set for your web application.
1.       Web.xml
2.       Weblogic.xml

Web.xml

<session-config>
  <session-timeout>60</session-timeout>
</session-config>

Please note in web.xml the session timeout is set in minutes.

Weblogic.xml

<session-descriptor>
    <session-param>
        <param-name>TimeoutSecs</param-name>
        <param-value>3600</param-value>
    </session-param>
</session-descriptor>

In weblogic.xml the session timeout is set in seconds.

More importantly the timeout value set in web.xml takes precedence over weblogic.xml. If you don’t set any values in web.xml, weblogic.xml takes over. I think it is better to handle session timeout in web.xml itself since web.xml takes precedence over application server’s deployment descriptors