I want to generate a new jessesion id after the user has logged into the system, rather than continuing with the jsessionid which was assigned when the user reached the homepage or was browsing thw website as anonymous user.
please provide inputs for generation a new jsession id.
req.getSession(true);// after login it still returns the jsession id generated before login.
Thanks in advance
Author and all-around good cowpoke
posted 6 years ago
Just invalidate the initial session, the system will generate a new ID. See the JavaDocs.