spring1.x和spring2.x session不共享问题

ゝ一纸荒年。 2023-02-26 09:29 11阅读 0赞

前因:

项目好几个模块,暂时命名为A,B,C模块,由于都是老项目,springboot版本都是1.x,接手后让升级A模块springboot版本,从1.x升级到2.x,升级后发现,A,B,C模块之间session无法共享,回退升级的模块到升级前,session共享正常,发现问题出现在升级,这个问题折磨好几天,各种尝试,都没成功,网上一般方案就是

// 取消仅限同一站点设置
    cookieSerializer.setSameSite(null);

自己实测后,不行

后来将B模块升级到和A模块一样的springboot版本也不行,纳闷了,暂时放弃(后来自测可以,当时配置错了)

解决:

第二天,再次尝试解决,自己参照网上弄了一个demo

demo组成:a模块(springboot版本2.3.1)+b模块(springboot版本1.5.2)

a模块pom.xml:

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
       <modelVersion>4.0.0</modelVersion>
       <parent>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-parent</artifactId>
          <version>2.3.1.RELEASE</version>
          <relativePath/> 
       </parent>
       <groupId>pers.wwz.springsession.study</groupId>
       <artifactId>springsession-study</artifactId>
       <version>0.0.1-SNAPSHOT</version>
       <name>springsession-study</name>
       <description>Demo project for Spring Boot</description>
    
       <properties>
          <java.version>1.8</java.version>
       </properties>
    
       <dependencies>
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-data-redis-reactive</artifactId>
          </dependency>
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
          </dependency>
          <dependency>
             <groupId>org.springframework.session</groupId>
             <artifactId>spring-session-data-redis</artifactId>
          </dependency>
    
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-test</artifactId>
             <scope>test</scope>
             <exclusions>
                <exclusion>
                   <groupId>org.junit.vintage</groupId>
                   <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
             </exclusions>
          </dependency>
          <dependency>
             <groupId>io.projectreactor</groupId>
             <artifactId>reactor-test</artifactId>
             <scope>test</scope>
          </dependency>
       </dependencies>
    
       <build>
          <plugins>
             <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
             </plugin>
          </plugins>
       </build>
    
    </project>
    
    测试类:

import org.springframework.beans.factory.annotation.Value;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    import javax.servlet.http.HttpSession;
    
    /**
     * session共享controller
     */
    @RestController
    @RequestMapping(value = "/session")
    public class SessionShareController {
    
        @Value("${server.port}")
        Integer port;
    
    
        @GetMapping(value = "/set")
        public String set(HttpSession session){
            session.setAttribute("user","王大锤");
            return String.valueOf(port);
        }
    
        @GetMapping(value = "get")
        public String get(HttpSession session){
            return "用户:"+session.getAttribute("user")+",端口:"+port;
        }
    }

a模块配置类:

import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.session.web.http.CookieSerializer;
    import org.springframework.session.web.http.DefaultCookieSerializer;
    
    @Configuration
    public class SpringSessionConfig {
    
        public SpringSessionConfig() {
        }
    
        @Bean
        public CookieSerializer httpSessionIdResolver() {
            DefaultCookieSerializer cookieSerializer = new DefaultCookieSerializer();
            // 取消仅限同一站点设置
            return cookieSerializer;
        }
    }

a模块配置文件:

spring:
      redis:
        port: 6379
        password: 123456
        host: 127.0.0.1
    server:
      port: 9001

b模块pom.xml:

<?xml version="1.0" encoding="UTF-8"?>
    <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
       <modelVersion>4.0.0</modelVersion>
       <parent>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-parent</artifactId>
          <version>1.5.2.RELEASE</version>
          <relativePath/> 
       </parent>
       <groupId>pers.wwz.springsession.study</groupId>
       <artifactId>springsession-study-low-springversion</artifactId>
       <version>0.0.1-SNAPSHOT</version>
       <name>springsession-study</name>
       <description>Demo project for Spring Boot</description>
    
       <properties>
          <java.version>1.8</java.version>
       </properties>
    
       <dependencies>
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-data-redis-reactive</artifactId>
             <version>2.3.1.RELEASE</version>
          </dependency>
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
          </dependency>
          <dependency>
             <groupId>org.springframework.session</groupId>
             <artifactId>spring-session-data-redis</artifactId>
          </dependency>
    
          <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-test</artifactId>
             <scope>test</scope>
             <exclusions>
                <exclusion>
                   <groupId>org.junit.vintage</groupId>
                   <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
             </exclusions>
          </dependency>
          <dependency>
             <groupId>io.projectreactor</groupId>
             <artifactId>reactor-test</artifactId>
             <version>3.3.6.RELEASE</version>
             <scope>test</scope>
          </dependency>
       </dependencies>
    
       <build>
          <plugins>
             <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
             </plugin>
          </plugins>
       </build>
    
    </project>

b模块测试类:

import org.springframework.beans.factory.annotation.Value;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    import javax.servlet.http.HttpSession;
    
    /**
     * session共享Controller
     */
    @RestController
    @RequestMapping(value = "/session")
    public class SessionShareController {
    
        @Value("${server.port}")
        Integer port;
    
    
        @GetMapping(value = "/set")
        public String set(HttpSession session){
            session.setAttribute("user","王大锤");
            return String.valueOf(port);
        }
    
        @GetMapping(value = "get")
        public String get(HttpSession session){
            return "用户:"+session.getAttribute("user")+",端口:"+port;
        }
    }

b模块配置文件:

spring:
      redis:
        port: 6379
        password: 123456
        host: 127.0.0.1
    server:
      port: 9003

使用两个端口9001和9002启动a模块,使用端口9003启动b模块

分别访问:

[http://localhost:9001/session/set][http_localhost_9001_session_set]

[http://localhost:9002/session/][http_localhost_9001_session_set]get

[http://localhost:9003/session/][http_localhost_9001_session_set]get

发现9001和9002两个模块之间session可以共享

发现session不能与9001,9002模块共享

后来在网上发现:

spring session 1.x与2.x 同时在项目中使用时，导致session不一致原因是1.x useBase64Encoding=false 而 2.0 为useBase64Encoding=true.

因此解决只需保证两边 useBase64Encoding 一致就行。目前，我们采用直接修改2.x useBase64Encoding 为主。

在使用spring session 2.x 工程添加以下配置。

@Bean public CookieSerializer cookieSerializer() \{ DefaultCookieSerializer cookieSerializer = new DefaultCookieSerializer(); cookieSerializer.setUseBase64Encoding(false); return cookieSerializer; \}

原文:[https://www.liangzl.com/get-article-detail-39498.html][https_www.liangzl.com_get-article-detail-39498.html]

参照这个设置,竟然成功了

于是乎在项目中试了试,果然可以,自此问题解决

[http_localhost_9001_session_set]: http://localhost:9001/session/set
[https_www.liangzl.com_get-article-detail-39498.html]: https://www.liangzl.com/get-article-detail-39498.html