Difference between request.getSession() and request.getSession(true)

Question

I understand the difference between request.getSession(true) and request.getSession(false). But request.getSession() & request.g

Answer 1

A major practical difference is its use:

in security scenario where we always needed a new session, we should use request.getSession(true).

request.getSession(false): will return null if no session found.