Implement a ReactiveSessionRepository backed by R2DBC

[rj93]

Expected Behavior

Similar as the JDBC one, but for reactive applications.

Current Behavior

There is none.

Context

How has this issue affected you?

• Currently have to deploy separate infrastructure such as Redis to achieve distributed sessions in a Spring Webflux application, such as ones that use sessions for authentication.

What are you trying to accomplish?

• To have distributed sessions backed by a R2DBC connection.

What other alternatives have you considered?

• Deploying additional infra that do have support for reactive web sessions.

Are you aware of any workarounds?

• No.

[eleftherias]

Thanks for the suggestion @rj93.

I will keep this open as a feature request.

As a workaround, you can use a custom ReactiveSessionRepository.
You can find more information in the reference docs.

[zhouxos]

+1

[marcusdacoregio]

I will probably wait on spring-projects/spring-framework#27229 to get merged so we have a better way to batch insert/update/delete session attributes.

[marcusdacoregio]

After trying different ways of doing batch inserts/updates I believe this will be kept on hold for now.

In Postgres, batch operations (concatenated statements with ;) do not accept parameters, and therefore, for Postgres there is a need to inline parameters (which opens up for injection attack vectors).
There are also variants for MySQL that accept like INSERT FIELDS(…) VALUES(…) VALUES(…) (multiple values elements).

I'm not sure yet if leveraging on multiple, separate transactional operations would be a nice alternative.

[dreamstar-enterprises]

I'm feeling burned out.

After spending 3 months trying to get Redis Session to work (it didn't), the delete functions wouldn't delete anything. I switched to MongoDB, gave up on that since MongoSession is private, and now am trying Jdbc wih a ReactiveSessionRegistry, but looks like I cannot implement that.

I seem cursed : (

@Component
internal class CustomSpringSessionReactiveSessionRegistry<S : Session>(
    private val jdbcIndexedSessionRepository: JdbcIndexedSessionRepository,
) : ReactiveSessionRegistry {