Redirect to login on session timeout in spring

Question

I have a multi-page web application, it uses iframe to handle the current page, and at the top I have the navigator.

The problem is, when the user become idle and the session timeout. The page continues as "logged" state. When the user tries to interact with the iframe page (current page) the server redirect the iframe page to the login page and the navigator continues in the top.

How can I redirect the entire page to the login?

Can I use websockets to the server send back a message informing that the session timeout and than redirect to login?

Answer 1

您可以像这样重定向iframe的父项：

parent.document.location.href = 'http://...'

Answer 2

If the login page is implemented by yourself (eg not by spring-security), you can add a piece of JavaScript code on the page to conditionally break out of the iframe:

<script type="text/javascript">
if (top.location!= self.location) {
   top.location = self.location.href;
}
</script>

There's no need to interact with the server.