Provides a way to identify a user across more than one page request or visit to a Web site and to store information about that user.
The servlet container uses this interface to create a session between an HTTP client and an HTTP server. The session persists for a specified time period, across more than one connection or page request from the user. A session usually corresponds to one user, who may visit a site many times. The server can maintain a session in many ways such as using cookies or rewriting URLs.
This interface allows servlets to
When an application stores an object in or removes an object from a session, the session checks whether the object implementsHttpSessionBindingListener
. If it does, the servlet notifies the object that it has been bound to or unbound from the session. Notifications are sent after the binding methods complete. For session that are invalidated or expire, notifications are sent after the session has been invalidatd or expired.
When container migrates a session between VMs in a distributed container setting, all session atributes implementing theHttpSessionActivationListener
interface are notified.
A servlet should be able to handle cases in which the client does not choose to join a session, such as when cookies are intentionally turned off. Until the client joins the session,isNew
returnstrue
. If the client chooses not to join the session,getSession
will return a different session on each request, andisNew
will always returntrue
.
Session information is scoped only to the current web application (ServletContext
), so information stored in one context will not be directly visible in another.
HttpSessionBindingListener
,HttpSessionContext
getAttribute(java.lang.String name) Returns the object bound with the specified name in this session, or null if no object is bound under the name. | |
getAttributeNames() Returns an Enumeration ofString objects containing the names of all the objects bound to this session. | |
getCreationTime() Returns the time when this session was created, measured in milliseconds since midnight January 1, 1970 GMT. | |
getId() Returns a string containing the unique identifier assigned to this session. | |
getLastAccessedTime() Returns the last time the client sent a request associated with this session, as the number of milliseconds since midnight January 1, 1970 GMT, and marked by the time the container recieved the request. | |
getMaxInactiveInterval() Returns the maximum time interval, in seconds, that the servlet container will keep this session open between client accesses. | |
getServletContext() Returns the ServletContext to which this session belongs. | |
getSessionContext() Deprecated. As of Version 2.1, this method isdeprecated and has no replacement.It will be removed in a futureversion of the Java Servlet API. | |
getValue(java.lang.String name) Deprecated. As of Version 2.2, this method is replaced by getAttribute(java.lang.String) . | |
getValueNames() Deprecated. As of Version 2.2, this method is replaced by getAttributeNames() | |
invalidate() Invalidates this session then unbinds any objects bound to it. | |
isNew() Returns true if the client does not yet know about the session or if the client chooses not to join the session. | |
putValue(java.lang.String name, java.lang.Object value) Deprecated. As of Version 2.2, this method is replaced by setAttribute(java.lang.String, java.lang.Object) | |
removeAttribute(java.lang.String name) Removes the object bound with the specified name from this session. | |
removeValue(java.lang.String name) Deprecated. As of Version 2.2, this method is replaced by removeAttribute(java.lang.String) | |
setAttribute(java.lang.String name, java.lang.Object value) Binds an object to this session, using the name specified. | |
setMaxInactiveInterval(int interval) Specifies the time, in seconds, between client requests before the servlet container will invalidate this session. |
public longgetCreationTime()
long
specifying when this session was created,expressed in milliseconds since 1/1/1970 GMTjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic java.lang.StringgetId()
public longgetLastAccessedTime()
Actions that your application takes, such as getting or setting a value associated with the session, do not affect the access time.
long
representing the last time the client sent a request associatedwith this session, expressed in milliseconds since 1/1/1970 GMTpublicServletContextgetServletContext()
public voidsetMaxInactiveInterval(int interval)
interval
- An integer specifying the number of secondspublic intgetMaxInactiveInterval()
setMaxInactiveInterval
method. A negative time indicates the session should never timeout.setMaxInactiveInterval(int)
publicHttpSessionContextgetSessionContext()
public java.lang.ObjectgetAttribute(java.lang.String name)
null
if no object is bound under the name.name
- a string specifying the name of the objectjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic java.lang.ObjectgetValue(java.lang.String name)
getAttribute(java.lang.String)
.name
- a string specifying the name of the objectjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic java.util.EnumerationgetAttributeNames()
Enumeration
ofString
objects containing the names of all the objects bound to this session.Enumeration
ofString
objects specifying thenames of all the objects bound tothis sessionjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic java.lang.String[]getValueNames()
getAttributeNames()
String
objects specifying thenames of all the objects bound tothis sessionjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic voidsetAttribute(java.lang.String name, java.lang.Object value)
After this method executes, and if the new object implementsHttpSessionBindingListener
, the container callsHttpSessionBindingListener.valueBound
. The container then notifies anyHttpSessionAttributeListener
s in the web application.
If an object was already bound to this session of this name that implementsHttpSessionBindingListener
, itsHttpSessionBindingListener.valueUnbound
method is called.
If the value passed in is null, this has the same effect as callingremoveAttribute()
.
name
- the name to which the object is bound;cannot be nullvalue
- the object to be boundjava.lang.IllegalStateException
- if this method is called on aninvalidated session
public voidputValue(java.lang.String name, java.lang.Object value)
setAttribute(java.lang.String, java.lang.Object)
name
- the name to which the object is bound;cannot be nullvalue
- the object to be bound; cannot be nulljava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic voidremoveAttribute(java.lang.String name)
After this method executes, and if the object implementsHttpSessionBindingListener
, the container callsHttpSessionBindingListener.valueUnbound
. The container then notifies anyHttpSessionAttributeListener
s in the web application.
name
- the name of the object toremove from this sessionjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic voidremoveValue(java.lang.String name)
removeAttribute(java.lang.String)
name
- the name of the object toremove from this sessionjava.lang.IllegalStateException
- if this method is called on aninvalidated sessionpublic voidinvalidate()
java.lang.IllegalStateException
- if this method is called on analready invalidated sessionpublic booleanisNew()
true
if the client does not yet know about the session or if the client chooses not to join the session. For example, if the server used only cookie-based sessions, and the client had disabled the use of cookies, then a session would be new on each request.true
if the server has created a session, but the client has not yet joinedjava.lang.IllegalStateException
- if this method is called on analready invalidated session