httpsession

Let's say I have a running Java-based web application with 0 or more valid HttpSession objects associated with it. I want a way to access the current list of valid HttpSession objects. I was thinking that I could implement an HttpSessionListener and use it to append to a list of session id values that are stored in an application-scoped attribute, but then I'm on the hook to update the list as sessions are invalidated and who knows what else. Before I start baking my own solution I thought I should ask the question: Does the servlet API provide some means of getting access to the complete list

As a result of a penetration test against some of our products in the pipeline, what looked to be at the time an 'easy' problem to fix is turning out to be a toughy. Not that it should of course, I mean why would just generating a brand new session for the current HTTPContext be so difficult? Bizarre! Anyway- I've written a cheeky little utility class to "just do it": (apologies for code formatting/highlighting/Visual Basic I must be doing something wrong) Imports System.Web Imports System.Web.SessionState Public Class SwitchSession Public Shared Sub SetNewSession(ByVal context As HttpContext)

So I am trying to get a servlet to add a Java object to the session of the user, when this servlet is requested. But after the servlet redirects to the next page and I try to retrieve the object, I get a null object instead. Here is what I do to add the object to the HttpSession (in the servlet): request.setAttribute("object", obj); Then I try to retrieve it by (in the JSP): Object obj = request.getAttribute("object"); So how would I get obj to not be null? Update: I have also tried this with nothing: HttpSession session = request.getSession(); session.setAttribute("object", obj); with the

I would like to handle request and session attributes myself rather then leave it to spring @SessionAttributes , for login of cookies handling for example. I just cant figure out how could I access the HttpRequest from within a controller, I need a way to go a layer above the @RequestAttribute and access the HttpRequest itself. With Stripes in used to do this by implementing an ApplicationContext and calling getAttribute() . Also, passing the HttpServletRequest as parameter seems not to be working: @RequestMapping(value="/") public String home(HttpServletRequest request){ System.out.println(""