how to find session all session id id's at a particular time
how to delete a session by knowing the session id.
As I recall, the early version of the
servlet API let you do this sort of thing but the methods were considered a security risk and were removed.
The simplest thing to do is to make a plain old
java object (POJO) that holds a user's information and manage those separately from the HttpSession mechanism. For example, in a collection keyed by user name.
Bill