I am going to uniquely identify a user by storing a unique ID in his/her cookie. HttpSession ID is a good choice from my google search. Just wanted to know how unique it is ? Is it unique to the webcontainer or once it expires , will it get regenerated ? If it repeats, all my user login can go for a toss.Need some expert opinion on using sessonID as a unique identifier for my users.
Share
A session ID must uniquely identify a session on a server, or on a cluster of servers. You don’t have any guarantee of uniqueness across restarts. Why don’t you simply use a database sequence, or a UUID?