Spring Session

Spring Session#

Features#

  • HttpSession - allows replacing the HttpSession in an application container (i.e. Tomcat) neutral way, with support for providing session IDs in headers to work with RESTful APIs

  • WebSocket - provides the ability to keep the HttpSession alive when receiving WebSocket messages

  • WebSession - allows replacing the Spring WebFlux’s WebSession in an application container neutral way

Minimum Requirements#

spring-session-data-redis 1.3.x 2.1.1.RELEASE
Java Java 5+ Java 8+
Servlet (not required) Servlet 2.5+ Servlet 3.1+
Spring (not required) Spring 3.2.14+ Spring 5.0.x+
Redis Redis 2.8+ Redis 2.8+

Upgrading to 2.x#

Baseline update#

Spring Session 2.0 requires Java 8 and Spring Framework 5.0 as a baseline, since its entire codebase is now based on Java 8 source code. Refer to guide for Upgrading to Spring Framework 5.x for reference on upgrading Spring Framework.

HttpSession Integration#

Why Spring Session & HttpSession?#

  • Clustered Sessions - Spring Session makes it trivial to support clustered sessions without being tied to an application container specific solution.

  • RESTful APIs - Spring Session allows providing session IDs in headers to work with RESTful APIs

HttpSession with Redis#

compile('org.springframework.boot:spring-boot-starter-web')
compile group: 'org.springframework.session', name: 'spring-session-data-redis', version: '2.1.1.RELEASE'
compile group: 'redis.clients', name: 'jedis', version: '2.9.0'

@EnableRedisHttpSession
public class HttpSessionConfig {
	@Bean
	public JedisConnectionFactory connectionFactory() {
		return new JedisConnectionFactory();
	}
}

spring.redis.host=127.0.0.1
spring.redis.port=6379
spring.redis.password=
spring.redis.database=0

CookieController

HttpSession & RESTful APIs#

Spring Session REST

Tips#

  • java -jar spring-boot2-security-1.0-boot.jar --server.port=8088

References#

Contents