[Springframework-developer] SWF - Creating HTTP sessions - Feedback needed

[Erwin V. <erw...@er...>]

The Spring Web Flow (SWF) FlowController forces the "requireSession" 
property it inherits from AbstractController to "true". This is logical 
since the webflow system needs to store flow execution state in the HTTP 
session.

So far so good. However, since the controller now requires an existing 
session, the user/developer is responsible for creating that session before 
a flow is started. This is typically not a problem in real-life applications 
since those carefully manage session creation and invalidation.

Still, we are wondering whether it is a good idea to implicitly create 
sessions (usually using request.getSession()) in a controller, or should 
this be left as a responsability of the application developer? Note that 
AbstractWizardFormController and AbstractFormController implicitly create 
sessions.

Erwin Vervaet
erw...@er...