What is the role of JSESSIONID in cookies and how is it used in the context of server sessions?

JSESSIONID is a session identifier that a Java server (e.g., a servlet container) creates and sends to the client as a cookie. Its main role is to link requests from the same client within a single session.

When a user first accesses the server, a session object is created, and the server generates a unique JSESSIONID. This identifier is sent to the client in a cookie. For subsequent requests, the browser automatically sends this cookie, and the server uses the JSESSIONID to find the corresponding session to maintain the user's state (e.g., authentication data, shopping cart, etc.).

Example:

// Getting session in a servlet
HttpSession session = request.getSession();
// Getting JSESSIONID from cookie (automatically)
String sessionId = session.getId();

Thus, JSESSIONID is a key to maintaining state between requests in the stateless HTTP protocol.