HttpSession (Servlet API Documentation)

Provides a way to identify a user across more than one page request or visit to a Web site and to store information about that user.

The servlet container uses this interface to create a session between an HTTP client and an HTTP server. The session persists for a specified time period, across more than one connection or page request from the user. A session usually corresponds to one user, who may visit a site many times. The server can maintain a session in many ways such as using cookies or rewriting URLs.

This interface allows servlets to

View and manipulate information about a session, such as the session identifier, creation time, and last accessed time
Bind objects to sessions, allowing user information to persist across multiple user connections

When an application stores an object in or removes an object from a session, the session checks whether the object implements HttpSessionBindingListener. If it does, the servlet notifies the object that it has been bound to or unbound from the session. Notifications are sent after the binding methods complete. For session that are invalidated or expire, notifications are sent after the session has been invalidated or expired.

When container migrates a session between VMs in a distributed container setting, all session attributes implementing the HttpSessionActivationListener interface are notified.

A servlet should be able to handle cases in which the client does not choose to join a session, such as when cookies are intentionally turned off. Until the client joins the session, isNew returns true. If the client chooses not to join the session, getSession will return a different session on each request, and isNew will always return true.

Session information is scoped only to the current web application (ServletContext), so information stored in one context will not be directly visible in another.

Version: $Version$

Author: Various

Method Summary
Object	getAttribute(String name) Returns the object bound with the specified name in this session, or `null` if no object is bound under the name.
Enumeration	getAttributeNames() Returns an `Enumeration` of `String` objects containing the names of all the objects bound to this session.
long	getCreationTime() Returns the time when this session was created, measured in milliseconds since midnight January 1, 1970 GMT.
String	getId() Returns a string containing the unique identifier assigned to this session.
long	getLastAccessedTime() Returns the last time the client sent a request associated with this session, as the number of milliseconds since midnight January 1, 1970 GMT, and marked by the time the container received the request.
int	getMaxInactiveInterval() Returns the maximum time interval, in seconds, that the servlet container will keep this session open between client accesses.
ServletContext	getServletContext() Returns the ServletContext to which this session belongs.
HttpSessionContext	getSessionContext()
Object	getValue(String name)
String[]	getValueNames()
void	invalidate() Invalidates this session then unbinds any objects bound to it.
boolean	isNew() Returns `true` if the client does not yet know about the session or if the client chooses not to join the session.
void	putValue(String name, Object value)
void	removeAttribute(String name) Removes the object bound with the specified name from this session.
void	removeValue(String name)
void	setAttribute(String name, Object value) Binds an object to this session, using the name specified.
void	setMaxInactiveInterval(int interval) Specifies the time, in seconds, between client requests before the servlet container will invalidate this session.

See Also: HttpSession

Returns true if the client does not yet know about the session or if the client chooses not to join the session. For example, if the server used only cookie-based sessions, and the client had disabled the use of cookies, then a session would be new on each request.

Returns: true if the server has created a session, but the client has not yet joined

Throws: IllegalStateException if this method is called on an already invalidated session

putValue

removeAttribute

Removes the object bound with the specified name from this session. If the session does not have an object bound with the specified name, this method does nothing.

After this method executes, and if the object implements HttpSessionBindingListener, the container calls HttpSessionBindingListener.valueUnbound. The container then notifies any HttpSessionAttributeListeners in the web application.

Parameters: name the name of the object to remove from this session

Throws: IllegalStateException if this method is called on an invalidated session

removeValue

setAttribute

Binds an object to this session, using the name specified. If an object of the same name is already bound to the session, the object is replaced.

After this method executes, and if the new object implements HttpSessionBindingListener, the container calls HttpSessionBindingListener.valueBound. The container then notifies any HttpSessionAttributeListeners in the web application.

If an object was already bound to this session of this name that implements HttpSessionBindingListener, its HttpSessionBindingListener.valueUnbound method is called.

If the value passed in is null, this has the same effect as calling removeAttribute().

Parameters: name the name to which the object is bound; cannot be null value the object to be bound


Throws: IllegalStateException	if this method is called on an
					invalidated session

Interface HttpSession

Method Detail

getAttribute

getAttributeNames

getCreationTime

getId

getLastAccessedTime

getMaxInactiveInterval