There are things like spring securty and spring mvc that will use session mutex provided by org.springframework.web.util.HttpSessionMutexListener, which is javax.servlet.http.HttpSessionListener.
javax.servlet.http.HttpSessionListener has two methods sessionCreated(HttpSessionEvent) and sessionDestroyed(HttpSessionEvent).
I saw that there is SessionDestroyedEvent, but is there is alternative to sessionCreated()?
HttpSessionStrategy#onNewSession() will be invoked too late (after the request is processed).