session.getAttribute() invocation bumps the session timeout and prevents session expiration and removal in JBoss EAP 7.x
Issue
- After moving to EAP 7, we see our sessions are never timing out as expected. We have some background activity that regularly polls a session.getAttribute call independently of any request. It looks like each getAttribute call bumps the session timeout and prevents it from expiring. Sessions with this activity expired as expected on EAP 6 or Tomcat.
- We reach an OOME and our heap dump shows many accumulated
io.undertow.server.session.InMemorySessionManager$SessionImpl
that seem to not be properly cleaned up after expected idle periods
Environment
- Red Hat JBoss Enterprise Application Platform (EAP) 7.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.