spring-session
spring-session copied to clipboard
spring-projects
Spring Session
I cannot help by feel there should be a better way of doing this with Spring, since when a sessions expires the indexed reference and reverse references (which have no...
**Describe the bug** If you call `findByPrincipalName` you can get inconstant results, as query `listSessionsByPrincipalNameQuery` used below does not order results by `id`. Later, extractor of the result is trying...
fixes issues with sessions expiring when -1 is used - https://github.com/spring-projects/spring-session/issues/3362 - https://github.com/spring-projects/spring-session/issues/3320
**Expected Behavior** We should be cleaning up principle index keys in the method **onMessage** in **RedisIndexedSessionRepository.java** even if redis key is not found. It is due to if the MessageListener...
**Describe the bug** If a security context has been created via a "remember me" mechanism rather than fresh credentials, this should be expressed via a `RememberMeAuthenticationToken`. This is required so...
I'm a bit confused by `SpringSessionBackedSessionRegistry` and in particular the comments: > This is a no-op, as we don't administer sessions ourselves. Because, we (Spring Session) _do_ administer sessions ourselves....
**Is your feature request related to a problem? Please describe.** Yes. Spring Session 1.x offered a mechanism to manage multiple `HttpSession` instances within a single browser using a URL parameter...
**Spring Session:** 3.5.0 **Expected Behavior** Right now `SessionRepositoryFilter#getRequestedSession` doesn't give us an easy way to know which session had a session deserialization issue as far as I can tell (please...
**Expected Behavior** As a developer I am able to customize behavior for `ConversionFailedException`, e.g. log field name, return null instead of throwing exception during `getAttribute` operations. **Current Behavior** When a...
**Description** When a `@SessionScope` bean contains a method annotated with `@PreDestroy`, the method is not called when using either `JdkSerializationRedisSerializer` or `GenericJackson2JsonRedisSerializer`. **Behavior with different serializers:** * **JdkSerializationRedisSerializer:** The `@PreDestroy`...
