Session
sessions are established for each user's network application. When the user first accesses the application within the Web page, the resin recognizes this unknown user and creates a new session to represent them. This session object will remain unchanged and the user's time using their network applications.
A session represents a class of Javax.servlet.http.HttpSession objects.
Scope session
Session set up the first user access to an integral part of the Web application, which requested the sessions. The resin considers the incoming request from the user and checks to see if it has a session for the user. If not, it creates one. This session object will remain unchanged for that user.
At the end of the session the object is a bit complicated. Because the resin can not tell the difference between the user has stopped using the application, the user is only considered for a long time to make a difference, resin must guess. The resin uses the timeout value to determine when the user should assume that the users have disappeared, and it defaults to 30 minutes. This means that if the user does not have any resources to access the Web application for 30 minutes the resin will break the session object is the user.
Developers can also explicitly break the session object, which is discussed later.
How to Resin track session
The resin established the session using the user's browser a unique ID is returned to the resin for each new requirement. This is one of two ways: rewrite using cookies or URLs.
Reprinted annotated Www.111cn.net/jsp/jsp.html