SE452: The Session Tracking API [6/16]

The Java Servlets API includes support for session tracking

The interface HttpSession encapsulates the session information

The session is stored on the server

Tracking is performed using Cookies or URL-rewriting and is transparent to the servlet

• To see this, block cookies in your browser and visit a page that uses servlets and sessions

The scope of an HTTPSession is the entire webapp

The session persists until it expires on the server, or it is expired in code

Programming issues:

• To accommodate URL rewriting, servlets should call encodeURL() for all URLs.
• All session objects have to be Serializable (implement java.io.Serializable)
• The HTTPSession can be accessed from more than one thread at a time