java session management

Question

I am working on a small webapp for fun, using just Java Servlets at the moment. I have two pages, test1 and test2. At the moment I am creating a new session in test1 like th

Answer 1

A session is just a basket that starts out empty. The concept of whether a user is authenticated or not is separate from whether or not the user has a session.

Java EE and the servlet specifications handle all the login stuff for you, redirecting to login pages and so on. Read up on the built-in capabilities of Java EE. Maybe start here.