Kill user session

Question

I have 3 tabs. Home, tab1, tab2. When user launches the app, its directed to Home tab & I create a new session using HttpSession session = request.getSession(); When user browses to other tabs, I maintain the session using HttpSession session = request.getSession(false); Now if the user click back on Home tab, I want to destroy the previous session and start fresh with new session. Please tell me how to do it?

Answer 1

Replace the code behind home tab by

HttpSession session = request.getSession();

if (!session.isNew()) {
    session.invalidate();
    session = request.getSession();
}

This is however a bit odd approach. I would rather put an attribute in the session and then intercept on its presence instead.

Answer 2

You could use session.invalidate()