Spring Session

HTTP is a stateless protocol, meaning that all requests and responses are independent.

Http session is a way to keep states at a server-side. A cookie is another way to keep states in the client-side.

Spring session is a way to manage a cluster of Http sessions;  across sessions, including their persistence.

Spring Security Session

Spring Boot Session