Disable session on embedded http server

Question

Can these properties used to disable the session mechanism completely?

server.session.persistent=false
server.session.timeout=0

If not, how to do this?

What do you mean by "disable session[s]"? What sort of behaviour change are you expecting comparing to the default "out-of-the-box" Spring Boot app? — kryger, Jan 26 '16 at 14:21
no those parameters will not disable sessions. closest answer is here https://stackoverflow.com/questions/2255814/can-i-turn-off-the-httpsession-in-web-xml which says we can not disable sessions in tomcat. — ozkanpakdil, Oct 05 '19 at 11:17

score 2 · Answer 1 · answered Nov 13 '19 at 13:13

2

had success with setting it to an empty set: server.servlet.session.tracking-modes=

answered Nov 13 '19 at 13:13

166_MMX

Nice trick. After setting this empty, the JSESSIONID had gone... – CelinHC Feb 11 '21 at 12:52

score 1 · Answer 2 · answered Nov 02 '19 at 15:47

1

try type in application.properties:

spring.session.store-type=none

...to disable spring session

answered Nov 02 '19 at 15:47

Vagner Nogueira

score -1 · Answer 3 · answered Apr 23 '18 at 08:45

A couple of notes for posterity:

Persistent sessions are sessions that survive server restarts, thus, when you enable that, Spring will serialize and store your session somewhere to load it later.
For a complete discussion on how to reliably disable sessions, please see this post: Can I turn off the HttpSession in web.xml?

3 Answers3