Set tracking mode to cookie to remove appended session id, without using web.xml

Question

I am setting up a completely java based spring app with no xml config :

public class WebApp extends AbstractAnnotationConfigDispatcherServletInitializer {
           


        

Answer 1

Since 3.2.0.RC1 this is available in the AbstractSecurityWebApplicationInitializer like so:

public class WebSecutityInit extends AbstractSecurityWebApplicationInitializer {

    @Override
    protected Set getSessionTrackingModes() {
        return EnumSet.of(SessionTrackingMode.SSL);
    }
}