# 设置会话超时时间为1小时(以秒为单位)
server.servlet.session.timeout=3600

@RestController
public class SessionController {
    
    @GetMapping("/keep-alive")
    public ResponseEntity<?> keepAlive(HttpSession session) {
        // 触摸会话以重置超时计时器
        session.setAttribute("lastAccess", System.currentTimeMillis());
        return ResponseEntity.ok().build();
    }
}

// 定期发送保持会话的请求
setInterval(() => {
    fetch('/keep-alive')
        .then(response => {
            if (!response.ok) {
                // 处理会话超时
                window.location.href = '/login?timeout=true';
            }
        })
        .catch(error => console.error('Keep-alive failed:', error));
}, 5 * 60 * 1000); // 每5分钟一次

@Configuration
public class SessionConfig implements HttpSessionListener {
    
    @Override
    public void sessionCreated(HttpSessionEvent se) {
        se.getSession().setMaxInactiveInterval(3600); // 1小时
    }
    
    @Override
    public void sessionDestroyed(HttpSessionEvent se) {
        // 会话销毁时的处理
    }
}

@ControllerAdvice
public class SessionTimeoutHandler {
    
    @ExceptionHandler(SessionExpiredException.class)
    @ResponseBody
    public ResponseEntity<?> handleSessionExpired() {
        return ResponseEntity.status(HttpStatus.UNAUTHORIZED)
                .body(Collections.singletonMap("error", "session_expired"));
    }
}