Java EE (Java Enterprise Edition) General Discussion

Hi there, I'm experiencing strange behaviour when dealing with session timeouts using Tomcat 4.0.6 on Win2K, under Struts 1.1-rc1.

If I wait for a users session to expire and then click on one of the links on my site which points to a Struts action, I am, as expected, redirected to my login screen by Tomcat.

However, when I log in again (even as a different user), the previously clicked Struts action which caused the login redirect is invoked, the new session seems to pick up where the old one left off. A new session is definitely being created as I print out the session ID on my index page and it differs after the timeout and re-login. Any help would be greatly appreciated.

Thanx in advance,
Ronny.