if (!shouldCommit(session)) {
return;
}
if (session.invalid()) {
destroy(session);
Cookie cookie = new Cookie(name, session.id()).maxAge(0);
response.add(cookie);
return;
}
String sid = save(session);
if (newSession(request, sid) || expires(session)) {
Cookie cookie = new Cookie(name, sid)
.httpOnly(true)
.maxAge(session.maxAge());
response.add(cookie);
}
}