Regarding Listeners

[Mathew Sam]

After session invalidation, HttpSessionListener is notified.Prior to that will the container notify the HttpSessionAttributeListener and HttpSessionBindingListener ? Because before invalidation of the session ,session attributes have to be removed.
regards,
Sam

[Kyle Tang]

yes. web-container should notify HttpSessionBindingListeners and HttpSessionAttributeListeners, before HttpSessionListen got the sessionDestroyed().
in the sessionDestroyed(), session.getAttribute() will be illegal, I forget whether it will throw an exception.

[jeffrey z. lee]

are the Attributes in session removed when session is Destroyed?

[Kyle Tang]

That's good question.
I am not for sure now, it is not on top of my head, but I have the impression that if the attribute implements HttpSessionBindingListener, they should get notified before the HttpSessionListener got sessionDestroyed() called.
If I have time later I will check the servlet spec. In the mean time I suggest you also take a look in the spec. One thing I still remember is "SCWCD study kit" says in sessionDestroyed() you can't call session.getAttribute(), that means all attributes should have been removed from that session.

[Maha Annadurai]

Here is the order in which the listeners will be invoked.
1. HttpSessionListener.sessionCreated(..)
2. HttpSessionBindingListener.valueBound(..)
3. HttpSessionAttributeListener.attributeAdded(..)
4. HttpSessionBindingListener.valueUnbound(..)
5. HttpSessionAttributeListener.attributeRemoved(..)
6. HttpSessionListener.sessionDestroyed(..)
Regarding the other question, if we invoke a method on HttpSession object inside sessionDestroyed(..) of HttpSessionListener method, we will get IllegalStateException.
Regards,
Maha Anna

[Timber Lee]

is the order related to the listener of deployment desription?

[Maha Annadurai]

The listed order above is for a particular case of removing a session attribute which implements the HttpSessionBindingListener and we also have a HttpSessionListener and a HttpSessionAttributeListener configured in web.xml.
Regards,
Maha Anna