how to implement session binding

That's basically the same solution as the Codeshare example. The downside of that rule is that if multiple different clients make requests over the same TCP connection with different jsessionid's only the first client would have a persistence record added in the response. That could be considered a problem. I'd suggest using the Codeshare example as it's fairly well tested by a few people.

 

 

Aaron