I am using tomcat 6.0.14, which does not support configuration for cookies.
So I have couple of pages in my app:
app.com/login.jsp<br>
app.com/dasboard.htm
The problem is that when user is at login.jsp, I see JSESSIONID as a cookie. I want to see session cookies only post logon when I am at dashboard – How do I make this happen?
By default every JSP creates new HTTP session (which is not the case for user servlets). Add this on top of your
login.jspto avoid eager session creation: