I'm accessing my Jetty Server using Apache HTTP Client. I have set the session timeout to be 20 minutes
The client is constantly polling the server to get updates every 3 minutes, max inactive time is 7 minutes.
After some time (~20 minutes) the server replies to the client requesting to set a new JSESSIONID (cookie) for the session. why is this so? i use the original session id for some security logic on the server, and the change of the session id causes problems.
Log snippet:network: Connecting
http://127.0.0.1:80/app/action1.do;jsessionid=gzyjueohanf1 with proxy=DIRECT
network: Connecting
http://127.0.0.1:80/app/action1.do;jsessionid=gzyjueohanf1 with with cookie "JSESSIONID=gzyjueohanf1"
network: Server http://127.0.0.17:80/app/action1.do;jsessionid=gzyjueohanf1 requesting to set-cookie with "JSESSIONID=bc7r8g488tsb;Path=/app"