I have the following implementation of HttpSessionlistener
public class SessionListener implements HttpSessionAttributeListener, HttpSessionListener { publ
you can just verify if your session user , aren't null like :
if (session.getAttribute("user") != null ) sessionsetAttribute("user","null");