request.getSession(), the story

1. request.getSession() can help you get an object of HttpSession type, usually called a session object. The scope of a session object is a session. Usually, the saved value will not disappear if the browser is not closed. Of courseThere will also be a session timeout.The server can set the session timeout time. There is a session time out place in web.xml. The default value of tomcat is 30 minutes.

2. Inside the project

request.getSession().setAttribute("UserAuthority", sessionUser); is to create a session valid for 30 minutes