HttpSession session = request.getSession();
session.setAttribute("变量名", 值对象);
session.getAttribute("变量名"); //此时取出来的是Object, 一般需要强转
session.removeAttribute("变量名");
session.invalidate(); //删除所有session中保存的键