Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I want to invalidate sessions of users based on some Event. I store their sessionID, how to get their HttpSession from this ID?
The HttpSessionContext class is deprecated with no replacement.
Servlet 2.2 specifically deprecated this for security reasons so there shouldn’t be any official way to do this. Not recommended but you can can try to use Manager.findSession() if you use Tomcat.
I just removed HttpSession from my application. It’s really hard to keep sessions in sync when many servers are running. We tried to tweak it by writing our own manager but can never get it work right. Finally, we wrote our own session implementation with about 500-lines of code and it works much better.