One thing I'm wondering, should we need theDisableableSessionProxy or could we use directlySession ?

The request attribute is a nice idea.
For the implementation, I'd like to propose another approach: the AbstractSessionListener could check the session usage index and report back when a stateless route increments the index, wdyt?
That would not be enough to know where the session was used, but that could be improved separately when resolvinghttps://github.com/orgs/symfony/projects/1#card-30499423

Yes it could be great, I'll give it a try

I had tried this approach but something came up to me.
Using this implementation, I think that we won't be able to prevent session start and usage as we are just reporting back. Therefore maybe session data could have been accessed or updated even if we report back session usage.
Do you see ?
But maybe I didn't get fully what you wanted to mean
WDYT ?

@nicolas-grekas I updated code according to your approach.
Indeed the code is much cleaner, thanks !

But what should we do when session is used in a stateless mode ? Should we throw an exception ? Just log it ? Or even make that behavior configurable ?

Throw when no logger is passed, log when one is - and pass one when kernel.debug=false in the DI extension?

Ok, so now if debug is enabled, this will throw an exception. If not, it'll log a warning.

Thank you@mtarld.