Session handling is not really a concern. It is handled by a class HttpSession(read the description in javadoc!), Which you can get by calling request.getSession().
It works in two ways (you do not need to do anything to support them):
- using session cookies (if cookies are allowed)
- url-rewriting - (
JSESSIONID) URL-.
(: (Tomcat, ..), HttpSession)