I'm developing a Spring 3.0 based web application that requires all users to log in to view data. Once logged in, certain parts of the screen use an AJAX polling mechanism to update screen content in the background. Currently, our session will not time out because each ajax request to the server updates the timeout of the web application, and the session never times out.
What I need to is modify the application such that when a user is logged in, the controller will respond to the poll with data, but not update the session timeout so the session times out at its scheduled time. If the user does not have an active session, the controller doesn't return anything.
How would I go about doing this?