in the last line in the following bug report
https://github.com/grails/grails-core/issues/5296
it is stated that;
In an ideal world, it would be possible to turn off HttpSession creation for a whole Controller (all actions) and also turn them off for a particular set of actions.
This is however, a quite old bugreport, so my question is:
is this possible in an upcoming or todays version (1.3.7) of grails? If not, shouldn’t it be?
The reason i seek this kind of behavior is due to development of RESTful API’s in grails, where the very nature of REST is stateless.
Grails does not create a session if you do not access the implicit session object or use session-scoped services. We have multiple projects running in production, where we do not use sessions. As long as you don’t access those objects, you won’t see any sessions (no JSESSIONID cookies being sent with the response).