Home/ Questions/Q 7429571
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-29T08:59:25+00:00

I have a Java EE application that receives requests over http/s. The requests do

  • 0

I have a Java EE application that receives requests over http/s. The requests do not contain any cookies or jsessionid request parameters.

In the request payload I can find a string “sessionid” that should allow me to associate that request to an HttpSession. I’ve managed to implement a mechanism that stores a map of sessions in memory, but that’s not (easily) scalable in a cluster environment.

The standard Java EE mechanism for associating requests to HttpSessions is based on cookies or URL rewriting, which are not available for me, since I don’t control the 3-rd party that sends the requests. Also, the HttpServletRequest object does not have a setSession() method.

Is there a straightforward way to associate requests to HttpSessions, without relying on a particular Java EE server or on some distributed cache?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    A few statements:

    • The 3rd party client does not conform to the HTTP spec, and that’s not your problem
    • If you need a custom mechanism, you should implement all of it. That is, do not rely on HttpSession – make a Map<String, Object> for each sessionId and support it yourelf
    • Any other solution would require plugging your code into the container (for tomcat thay might be a Valve), but there is no standard solution.
    • 0