Kill user session

问题

I have 3 tabs. Home, tab1, tab2. When user launches the app, its directed to Home tab & I create a new session using HttpSession session = request.getSession(); When user browses to other tabs, I maintain the session using HttpSession session = request.getSession(false); Now if the user click back on Home tab, I want to destroy the previous session and start fresh with new session. Please tell me how to do it?

回答1:

Replace the code behind home tab by

HttpSession session = request.getSession();

if (!session.isNew()) {
    session.invalidate();
    session = request.getSession();
}

This is however a bit odd approach. I would rather put an attribute in the session and then intercept on its presence instead.

回答2:

You could use session.invalidate()

回答3:

in jsp you can reset the session with

session.invalidate();

after that give the user a new one

回答4:

first use session.invalidate(); to destroy session

request.getSession(true); will create new session if there is no session

来源：https://stackoverflow.com/questions/5404907/kill-user-session