Httprequest.getSession(false) creating a NEW Session

Question

I am working on a web application which uses STRUTS. All the client requests are directed to loginaction class.
Any resource in the application, is accessed thru the action class.
Overview: In the action class, i am checking if there is any session associated with the new user using
session = request.getSession(false);
                  if (session != null) {
      if (session.isNew()) {
      logger.info("New Session Created [" + session.getId() + "]");
      } else {
      logger.info("Session EXIST'S ["+ session.getId()
     + "], Retreiving user from session");
                   }According to the Servlets 2.2 API:
public HttpSession getSession(boolean create) Returns the current HttpSession associated with this request or, if if there is no current session and create is true, returns a new session.
If create is false and the request has no valid HttpSession, this method returns null.
if (session.isNew()) ,
this if statement should return false and be skipped, as session = request.getSession(false);wont create a new session. When i parse the logs, I see the log statement, "New Session Created ". Which makes me wonder, that a new session is being created
Problem: When i debug, i see that container is creating a new session if the session doesnt exist. According to API mentioned above, it should not create a new session. It should return null.
Did anyone had a similar issue? While researching i found this article that using struts, the container creates a default session.
I found this article: http://www.theserverside.com/discussions/thread.tss?thread_id=21643
Environment: IDE:WSAD5.1, Appserver:Websphere, Browser:IE 6.0, Struts, JSP, JSTL

Answer 1

Hi,
We have two appliactions. Our application say B is uses authentication mechanism provided by say A.
So the user, is presented a login page by application A. Once they are authenticated, without the knowledge of user, its being forwarded to our application say B.
Once he is in our application, he can navigate in our application, say,
he goes from page1 to page2. page1 is the main page. Now browser caching is enabled. When he hits the back button to access page1, browser is sending a new request to our applicaiton insted of furnising form local cache( this is another issue). Even though a new request is sent, all the requests are routed thru a struts controller action class. Now in the action class, we check if its a new session or not.
request.getSession(false). Since the user is an old user, it shouldnt create any new session.
As per your suggestion, where should i put the directive in the jsp to not to create a default session?. In page1 which is the main page?.
How should i implemnt the session listener interface. Do u have any templates or code snippets?.
Any suggestions?