java - How to force Tomcat to delete expired Sessions when loggin User closes his Browser? -

i implemented sessionlistener track open sessions of webserver

i set in web.xml:

<listener>     <listener-class>demo.myhttpsessionlistener</listener-class> </listener> <session-config>     <session-timeout>1</session-timeout>  </session-config> 

my demo.myhttpsessionlistener.groovy:

class myhttpsessionlistener implements httpsessionlistener {    @override    public void sessioncreated(httpsessionevent event) {     ...    }       @override      public void sessiondestroyed(httpsessionevent event) {        ...      } } 

when go website sessioncreated called. sessiondestroyed called when close browser wait session timeout.

the problem occurs when loggin on website , close browser. in case sessiondestroyed never called after timeout. why session never deleted when user has been logged in , closes browser? have expired sessions of logged in user deleted after closes browser , waits time out time?

here solution. if set session timeout in web.xml, spring security override value when user logged in. timeout set to:

session.maxinactiveinterval = -1 

so have override value again in order make session timeout working.