SessionState in ASP.NET Core（转载）
问：
In asp.net mvc we used to decorate controller for disabling session state by using attribute as [SessionState(System.Web.SessionState.SessionStateBehavior.Disabled)] How we can do it in ASP.NET Core?
答：
There is no need for it. Unlike old asp.net, session is not locked for a request. This allows the session handler to only be called if you access a session value. So if your action does not access session, session is not loaded, nor is it written back.
You can find reference here which mentioned that session is not locked.
Session and app state in ASP.NET Core
