A {@link HttpSessionStrategy} that uses a header to obtain the session from. Specifically, this implementation willallow specifying a header name using {@link HeaderHttpSessionStrategy#setHeaderName(String)}. The default is "x-auth-token". When a session is created, the HTTP response will have a response header of the specified name and the value of the session id. For example:
HTTP/1.1 200 OK x-auth-token: f81d4fae-7dec-11d0-a765-00a0c91e6bf6
The client should now include the session in each request by specifying the same header in their request. For example:
GET /messages/ HTTP/1.1 Host: example.com x-auth-token: f81d4fae-7dec-11d0-a765-00a0c91e6bf6
When the session is invalidated, the server will send an HTTP response that has the header name and a blank value. For example:
HTTP/1.1 200 OK x-auth-token:
@since 1.0
@author Rob Winch