Redirection does not work after session timeout in Admin Console

[tnagao7]

Environment Details

• GlassFish Version (and build number): GlassFish 7.0.19
• JDK version: OpenJDK 21.0.4
• OS: Red Hat Enterprise Linux 8.6
• Database: none

---

Problem Description

After session timeout in the Admin Console, the page only containing "class jakarta.faces.application.ViewExpiredException" is shown, and the web browser is not redirected to the home page or the login page.

This behavior is reproduced in GlassFish 7 or later.
It is expected that the web browser is redirected to the home page or the login page as in GlassFish 6 or earlier.

Steps to reproduce

This is reproduced when a button triggering Ajax communication is clicked after session timeout.

1. Run the following commands to set the admin session timeout to 1 minute.
   • asadmin set server.admin-service.das-config.admin-session-timeout-in-minutes=1
   • asadmin stop-domain
   • asadmin start-domain
2. Open the Admin Console in the web browser.
3. Open the "Clusters" page and wait more than 1 minute.
4. Click the "New" button.

Impact of Issue

It is an incompatibility with GlassFish 6 or earlier.

[tnagao7]

Since Mojarra 4.0, the property com.sun.faces.enableRestoreView11Compatibility has been ignored, and thus jakarta.faces.application.ViewExpiredException is thrown when session timeout.

See also eclipse-ee4j/mojarra#4766