All geek questions in one place

Apache Tomcat (6.x) Hosting SessionID

I need to know which class in Tomcat (6.x) is responsible for placing the SessionID in the cookie or adding it to the request. Is this done after all the filters have passed?

I need to change the SessionID before the response is sent to the browser ...

+3
source share
1 answer

Session ID is defined by Tomcat Session Manager - there are several different implementations. If you change the session ID at runtime of your application, you can break some of the assumptions made by the session manager.

, . "" - ManagerBase. StandardManager generateSessionId(), Tomcat , Context Manager server.xml

. , cookie. , , cookie HTTP-.

+5
source

Source: https://habr.com/ru/post/1715609/

More articles:


All Articles