public void setAttributes(AbstractSessionAttributes attributes) {
    this.attributes = attributes;
  }
The {@code SessionManager} injects this when creating a new session.
extensions/geode-modules-session-internal/src/main/java/org/apache/geode/modules/session/internal/filter/GemfireHttpSession.java