SE452: The Session API [7/16]

In the HttpServletRequest class:

HttpSession getSession()
HttpSession getSession( boolean create)
        

Returns the current HttpSession associated with this request, or if there is no current session and create is true, returns a new session.

Default: create is true

String getRequestedSessionId()
        

Returns the session ID.

In the HttpServletResponse class:

String encodeURL( String url)
        

Encodes the specified URL by including the session ID in it, or If encoding is not needed, returns the URL unchanged.

The HttpSession class:

void setAttribute( String name,Object value)
        

Binds an object to the specified name in this session.

Object getAttribute( String name)
        

• Returns the object bound to the specified name in this session, or
• Returns null if no object is bound to the name.

void removeAttribute( String name)
        

• Removes the binding with the specified name and the object from this session.
• Can do the same by calling setAttribute(name, null);

String getId()
        

Returns the session ID.

Enumeration getAttributeNames()
        

Returns an Enumeration of string objects containing the names of all the objects bound to this session.

long getCreationTime()
        

Returns the time when this session was created in ms since the epoch

long getLastAccessedTime()
        

Returns the last time the client sent a request associated with this session.

int getMaxInactiveInterval()
        

• Returns the maximum time interval, in seconds, that the servlet container will keep this session open between client accesses.
• Tomcat default: 30 minutes

void setMaxInactiveInterval( int interval)
        

• Specifies the time, in seconds, between client requests before the servlet container will invalidate this session.
• A negative time indicates the session should never expire.

void invalidate()
        

Invalidates this session and unbinds any objects in this session.

boolean isNew()
        

• Returns true if the client does not yet know about the session, or
• if the client chooses not to join the session (i.e. cookies are disabled).