Steps to Reproduce

enable /zkcomet server push (servlet 3)

<zk>
    <zscript><![CDATA[
        desktop.enableServerPush(true);
    ]]></zscript>
    <button onClick=""/>
</zk>

configure an ajax timeout shorter than session timeout

e.g.:

	<session-config>
		<session-timeout>10</session-timeout>
		<timeout-message>Session Timeout: "reload" the page or "cancel" to copy your unsaved data first.</timeout-message>
	</session-config>
	<preference>
		<name>CometServerPush.ajax.timeout</name>
		<value>4000</value>
	</preference>
	<preference>
		<name>CometServerPush.retry.delay</name>
		<value>1000</value>
	</preference>

wait until the session should be timed out (e.g. 20 seconds)
click the button

Current Result

session didn't time out, click still succeeds

Expected Result

session should be timed out due to user inactivity

Debug Information

the request to /zkcomet extends the servlet session
it doesn't use the same mechanism used in DHtmlUpdateServlet distinquishing between user and non user requests (e.g onTimer/dummy don't extend the session)

Workaround