Destroy the session and empty the specified attributes

The destruction session：session.invalidate() Clear current session All the information about
Empty session Specified properties in ：session.removeAttribute() Applicable to clearing the specified attribute , Specified in parentheses session Properties of .
Empty session：Session.Clear() Is to put Session All items in the object have been deleted ,Session There's nothing in the object . however Session The object remains .

session Of removeAttribute() and invalidate() The difference between
session.invalidate() Destroy the association with the user session, For example, some users force the browser to close , And tracking users' information session There is still , But the user has left .
although session Lifecycle browse default time 30 branch , But in 30 Within minutes, other users can also access the previous user's page , It is necessary to destroy the user's session.
session.removeAttribute() remove session An attribute in .
stay spring In the example, the login code of the pet store ：
request.getSession().removeAttribute(“userSession”);
// Log off users , send session invalid .
request.getSession().invalidate();