HttpSession 源码阅读之 session 过期原理

主要是用 lastAccessedTime 或 thisAccessedTime 和系统当前时间的差值 和 maxInactiveInterval 作比较判断是否过期：

 

 

 

 

 

 

 

 

 

 

 

 

 

 

如果过期了，下面会创建新的 session：

protected Session doGetSession(boolean create) {
    Context context = getContext();
    if (context == null) {
        return null;
    }
    if ((session != null) && !session.isValid()) {
        session = null;
    }
    if (session != null) {
        return session;
    }
    Manager manager = context.getManager();
    if (manager == null) {
        return null;
    }
    if (requestedSessionId != null) {
        try {
            session = manager.findSession(requestedSessionId);
        } catch (IOException e) {
            session = null;
        }
        if ((session != null) && !session.isValid()) {
            session = null;
        }
        if (session != null) {
            session.access();
            return session;
        }
    }
    if (!create) {
        return null;
    }
    boolean trackModesIncludesCookie =
            context.getServletContext().getEffectiveSessionTrackingModes().contains(SessionTrackingMode.COOKIE);
    if (trackModesIncludesCookie && response.getResponse().isCommitted()) {
        throw new IllegalStateException(
                sm.getString("coyoteRequest.sessionCreateCommitted"));
    }
    String sessionId = getRequestedSessionId();
    if (requestedSessionSSL) {
    
    } else if (("/".equals(context.getSessionCookiePath())
            && isRequestedSessionIdFromCookie())) {
        if (context.getValidateClientProvidedNewSessionId()) {
            boolean found = false;
            for (Container container : getHost().findChildren()) {
                Manager m = ((Context) container).getManager();
                if (m != null) {
                    try {
                        if (m.findSession(sessionId) != null) {
                            found = true;
                            break;
                        }
                    } catch (IOException e) {
                    }
                }
            }
            if (!found) {
                sessionId = null;
            }
        }
    } else {
        sessionId = null;
    }
    // 创建新的 session 
    session = manager.createSession(sessionId);
    if (session != null && trackModesIncludesCookie) {
        Cookie cookie = ApplicationSessionCookieConfig.createSessionCookie(
                context, session.getIdInternal(), isSecure());
        response.addSessionCookieInternal(cookie);
    }
    if (session == null) {
        return null;
    }
    session.access();
    return session;
}