authentication - Where does Jetty store information about authenticated user? -

i read documentation on jetty page: http://www.eclipse.org/jetty/documentation/9.2.6.v20141205/index.html

but still not know jetty store information authenticated user. writing application state less despite of fact need know logged in.

do need set session replication via database or maybe there smarter way session stored in cookie: http://httpd.apache.org/docs/trunk/mod/mod_session_cookie.html

it depends on authentication mechanism using. if use basic, nothing stored on server , credentials sent along every request.

if use digest, transient data stored on server (in digestauthenticator), not need replicated in cluster.

if use form auth, credentials indeed cached in users session , if operating in cluster either need distribute session.... or if want stateless, use single sign on mechanism handle authentication failures.