DO NOT REPLY [Bug 29639] New: - HttpSession surviving after a Tomcat restart

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=29639>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=29639

HttpSession surviving after a Tomcat restart

           Summary: HttpSession surviving after a Tomcat restart
           Product: Tomcat 5
           Version: 5.0.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Servlet & JSP API
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: christine.plumejeaud@eloquant.com


I'm using a Servlet controller running on tomcat, which drives requests from 
jsp to jsp pages. In those jsp, I use the session object.
When a user has done different things in its session, I store them through the 
session API : session.setAttribute("isLoaded", new Boolean("true")) by example.
This session should be entirely destroyed when I restart tomcat. But after 
restarting tomcat, if I don't clean my browser temporaily cookies, it seems to 
me that the old session is always alive, with all attributes I had set into. 
Moreover, session.isNew() return false, when it should return true.
The sessionId is the one of a session existing before the restart of tomcat
The session.getCreationTime() is also previous to the tomcat restart

Is this due to the jsp pages (that could provide me with an old session?), or 
to the browser cookie that contain sessionId and data informations?
I'm wondering.
Thanks, 
Christine

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org