1. Vincent Kok Avatar Vincent Kok
  2. Untitled project
  3. ac-spring-boot
  4. Issues

Disable use of HTTP session by Spring Security

Issue #12 new
Kenny MacLeod created an issue

By default Spring Security uses the HTTP session to store the authentication. This is convenient, but Connect add-ons should be stateless.

Comments (4)

  1. mjensenbitbucket-bot

    This is worse than just an inconvenience, server-to-server calls do not have access to the client http session. This means calls like static add-ons blueprints, or other integrations that don't come from the client browser simply wont work.

  4. Vincent Kok repo owner

    @mjensen Could you elaborate a little more on this use case? Would removing Spring relying on a session solve the issue or do I need to consider more details?

  5. Log in to comment
Assignee
–
Type
bug
Priority
minor
Status
new
Votes
1
Watchers
1
Jira: the preferred issue tracker for Bitbucket. Join the team!