I am using JBoss EAP 6.4. I have few questions w.r.t how JBoss create/manage/tracks session ID. Please find below my questions?
1. Does JBoss generates unique Session ID for each session?
2. Does JBoss recognize only system-generated session IDs?
3. Does JBoss use a FIPS 140-2 random number generator to generate the randomness of the session IDs?
Any help would be appreciated.
Thank You.