sessionManager

The SessionManager backing the built SessionAuthenticator.

Defaults to HttpSessionManager.of (servlet-session storage). Bring your own implementation (Redis, in-memory, signed cookie, …) to change how sessions are stored. Hold onto this reference (or your own instance) to create and invalidate sessions from application handlers.