Difficult to tell you what is happening with so little information ;) What
version of jetty? What configuration of the session management:
SessionCache, SessionStore, SessionIdManager?
Does your webapp involve forwarding between contexts? Does your webapp have
any filters or 3rd party libraries that might create a session?
Have you used a tool like Chrome's developer panel that shows you the http
dialog going on between the tabs and the server? Or tcpdump/wireshark etc
etc?
Have you turned on DEBUG level logging for org.eclipse.jetty.server.session?
How does SessionState get set onto the Session? Is it via a
HttpSessionListener? If so, Request.getSession() will create a new Session
if one does not exist, and the listener could set the SessionState on it.
Jan
On Fri, 26 Feb 2021 at 13:14, John English <john.fore...@gmail.com> wrote:
> I have a webapp requiring a user to log in before doing anything else.
> State information is stored in an object in a session attribute called
> "state". When I log out I do the following:
>
> HttpSession session = request.getSession();
> if (session != null) {
> session.removeAttribute("state");
> try {
> session.invalidate();
> }
> catch (IllegalStateException e) { }
> }
>
> I go to the webapp and log in, then open another tab for the same webapp
> and log out, executing the code above. I then go back to the first tab
> and click a button which sends a POST request to a servlet that starts
> off like this:
>
> HttpSession session = request.getSession();
> SessionState state = (session != null ?
> (SessionState)session.getAttribute("state") : null);
>
> The session and the state are both valid objects after these two lines.
>
> Can anyone tell me what might be happening here?
>
> --
> John English
> _______________________________________________
> jetty-users mailing list
> jetty-users@eclipse.org
> To unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/jetty-users
>
--
Jan Bartel <j...@webtide.com>
www.webtide.com
*Expert assistance from the creators of Jetty and CometD*
_______________________________________________
jetty-users mailing list
jetty-users@eclipse.org
To unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/jetty-users
