spring-projects / spring-projects/spring-security
Extract SessionManagementFilter into different components
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Expected Behavior
The SessionManagementFilter features should be separated into different components so users can use lazy session access while still using some of its features.
Current Behavior
The SessionManagementFilter is not used by default in Spring Security 6. If someone wants to use it, that means that they won't have the benefit of lazy session access because right now any feature of SessionManagementFilter means that lazy session access is gone.
Context
This would allow us to deprecate the SessionManagementFilter and simplify the configuration. It also can simplify the documentation #12601
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by examining SessionManagementFilter and its current features, then review the related documentation issue #12601. Done means the features are separated into components so selected features can be used without disabling lazy session access, with a path toward deprecating SessionManagementFilter and simplifying configuration.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- security
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100