GitHub user upthewaterspout opened a pull request: https://github.com/apache/geode/pull/740
GEODE-3513: Removing the use of native sessions session caching In the session module for generic app servers, we were asking the application server for a 'native' session and then wrapping it on our own GemfireHttpSession. However, we were not cleaning up that native session, which means that in PROXY mode we were leaving these sessions on the client with them being useful. The GemfireHttpSession now no longer wraps a native session. We are still temporarily creating a native session because it is the only way for us to get the session timeout value that was configured in web.xml, but the native session is immediately invalidated. Adding and extending cargo session tests to test how sessions are being cleaned up from the clients and the server. Thank you for submitting a contribution to Apache Geode. In order to streamline the review of the contribution we ask you to ensure the following steps have been taken: ### For all changes: - [ ] Is there a JIRA ticket associated with this PR? Is it referenced in the commit message? - [ ] Has your PR been rebased against the latest commit within the target branch (typically `develop`)? - [ ] Is your initial contribution a single, squashed commit? - [ ] Does `gradlew build` run cleanly? - [ ] Have you written or updated unit tests to verify your changes? - [ ] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under [ASF 2.0](http://www.apache.org/legal/resolved.html#category-a)? ### Note: Please ensure that once the PR is submitted, you check travis-ci for build issues and submit an update to your PR as soon as possible. If you need help, please send an email to dev@geode.apache.org. You can merge this pull request into a Git repository by running: $ git pull https://github.com/upthewaterspout/incubator-geode feature/GEODE-3513 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/geode/pull/740.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #740 ---- commit 93163bf8077cd6363dfcb9c1e1a37d1876e1669e Author: Dan Smith <upthewatersp...@apache.org> Date: 2017-08-11T16:46:40Z GEODE-3513: Removing the use of native sessions session caching In the session module for generic app servers, we were asking the application server for a 'native' session and then wrapping it on our own GemfireHttpSession. However, we were not cleaning up that native session, which means that in PROXY mode we were leaving these sessions on the client with them being useful. The GemfireHttpSession now no longer wraps a native session. We are still temporarily creating a native session because it is the only way for us to get the session timeout value that was configured in web.xml, but the native session is immediately invalidated. Adding and extending cargo session tests to test how sessions are being cleaned up from the clients and the server. ---- --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. ---