Sending a session cookie in the response

[Jose Esteban]

In page 231 of HFSJ you can read:
------------------------------------------
Sending a session cookie in the response
HttpSession session = request.getSession();

... everything else happens automatically.
...
You don't set the Cookie into the response (under the Set-Cookie header).
------------------------------------------

Since the getSession() method doesn't have any reference to the response, I don't understand how this method can set a cookie into the response.

Anybody has an explanation?

[Ganeshji Marwaha]

I will try to attempt this question.

The container is the one who provides the servlet with reference to request and response objects it creates. so, obviously the container will have a reference to the response object, until the response is completely written to the client. Then both request and response may be GC-ed.

[Bassam Zahid]

I think this is done by the container by "adding a header containing cookie object" in response object.

The container might do it this way:

response.addHeader("sessionCookie", new Cookie("...", "..."));

Of course, the container has references to request / response and other objects.

[Jose Esteban]

Thanks