multiple requests from a user are most likely not in the same thread. Suppose the first request is thread A, which is stored in threadLoacl. The second request is thread B. isn"t it impossible to get the session of the first request from the current thread? Or maybe user 1 requests the service first and puts the session in the threadlocal of thread a, and user 2 also uses this thread, and user 2 stores the session in the threadlocal of thread a, doesn"t it overwrite the session pollution of user 1?