Game-as-a-Service / Game-as-a-Service/Lobby-Platform-Service
🚩 關閉 Spring 的 SESSION Cookie
- Dominant language
- Kotlin
- Stars
- 32
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
後端 API Server 應該要是 Stateless 的，所以我們要關閉 Session Cookie。
## 驗收標準
- [ ] 所有 endpoint 不應該發 `JSESSIONID` Cookie
需要測試其他 endpoint 有沒有被影響
- [ ] 測試 `/health` 無 Session Cookie，還可以運作
- [ ] 測試 `/swagger-ui/*` 無 Session Cookie，還可以運作
- [ ] 測試 `/games` 無 Session Cookie，還可以運作
- [ ] 測試 `/users/*` 無 Session Cookie，還可以運作
- [ ] 測試 `/rooms` 無 Session Cookie，還可以運作
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the Spring session configuration and the tests or entry points for /health, /swagger-ui/*, /games, /users/*, and /rooms. Verify each endpoint still works without emitting a JSESSIONID Cookie; done means all listed endpoints pass those checks and no endpoint sets that cookie.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kotlin, spring
- Domain
- api, backend, security
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 48/100