If you read the WODirectAction JavaDoc, you will find this paragraph
just before the "Nested Class Summary":
To handle stale session IDs (e.g. session IDs stored in cookies, and
those session IDs refer to expired sessions), make sure to do the
following at the beginning of your direct action method:
public WOActionResults myAction() {
if ( getSessionIDForRequest(request()) != null &&
existingSession() == null ) {
// special behavior, like a returning a login page, e.g.
return pageWithName("LoginPage");
} else {
// whatever else you'd normally do here
}
}
For further explanation, check the referenced methods.
Regards,
Jerry