Allow persistent sessions across restarts of embedded servlet containers

[mus65]

When restarting an application with an embedded Tomcat, Tomcat is not able to restore the sessions since Spring generates a new temporary directory on every start (e.g. /tmp/tomcat.5990562997404648887.8080 on my linux machine). However, restoring the sessions would be really useful, especially during development.

I figured out a way to work around this by setting server.tomcat.basedir=/tmp. However, this is inconvenient since it has to be changed depending on the operating system.

IMHO Spring Boot should not generate a new random temporary directory on each start, but use something static to make persistent sessions work out-of-the-box. If this is not possible for some reason, this should at least be documented since it took me quite some time to figure out.

[philwebb]

I don't think we can use a static directory since two different applications could accidentally end up loading each others session.

[chrylis]

I suggest making Spring Session the go-to setup for this.

I'm not sure if I'm getting this right but I was surprised that the access tokens generated by Spring Security OAuth2 were still valid after I restarted the server.

I found this and now tried to disable the caching. I first removed the cached files rm -rf /tmp/tomcat.* and then set persistence to false

server.session.persistent=false
server.tomcat.basedir=/tmp

This is the configuration for the AuthorizationServerConfigurerAdapter:

@Configuration
@EnableAuthorizationServer
@EnableResourceServer
public class OAuth2Configuration extends AuthorizationServerConfigurerAdapter {

    @Override
    public void configure(ClientDetailsServiceConfigurer configurer) throws Exception {
        configurer
                .inMemory()
                .withClient(clientId)
                .secret(clientSecret)
                .authorizedGrantTypes(grantType)
                .scopes(scopeRead, scopeWrite)
                .resourceIds(resourceIds);
    }
    // ..
}

However, I can restart the server as often as I want, the access token is always valid. Am I getting something wrong here?

[wilkinsona]

@silentsnooc This issue's been closed for over two years. If you have a question, please ask on Stack Overflow or Gitter.