How to invalidate a HTTPSession?

[paulkuhn]

Hello,

I am trying to implement a logout function that invalidates the HTTPSession of the Tomcat 6 Server.

I am using:

FlexContext.getHttpRequest().getSession().invalida te();

However, when I send the next request to the server, the server returns a newly generated HTTPSession (new Session ID).

What am I missing here? I do not want to have a new session after I destroyed it...

Thanks in advance!
Paul