This guide describes how to use Spring Session to transparently leverage a relational to back a web application’s HttpSession
with XML based configuration.
Note
|
You can find the completed guide in the httpsession-jdbc-xml sample application. |
Before you use Spring Session, you must update your dependencies. If you are using Maven, you must add the following dependencies:
<dependencies>
<!-- ... -->
<dependency>
<groupId>org.springframework.session</groupId>
<artifactId>spring-session-jdbc</artifactId>
<version>{spring-session-version}</version>
<type>pom</type>
</dependency>
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-web</artifactId>
<version>{spring-core-version}</version>
</dependency>
</dependencies>
After adding the required dependencies, we can create our Spring configuration.
The Spring configuration is responsible for creating a servlet filter that replaces the HttpSession
implementation with an implementation backed by Spring Session.
The following listing shows how to add the following Spring Configuration:
link:{samples-dir}spring-session-sample-xml-jdbc/src/main/webapp/WEB-INF/spring/session.xml[role=include]
-
We use the combination of
<context:annotation-config/>
andJdbcHttpSessionConfiguration
because Spring Session does not yet provide XML Namespace support (see gh-104). This creates a Spring bean with the name ofspringSessionRepositoryFilter
. That bean implementsFilter
. The filter is in charge of replacing theHttpSession
implementation to be backed by Spring Session. In this instance, Spring Session is backed by a relational database. -
We create a
dataSource
that connects Spring Session to an embedded instance of an H2 database. We configure the H2 database to create database tables by using the SQL script that is included in Spring Session. -
We create a
transactionManager
that manages transactions for previously configureddataSource
.
For additional information on how to configure data access-related concerns, see the {docs-url}/spring/docs/{spring-core-version}/spring-framework-reference/data-access.html[Spring Framework Reference Documentation].
Our Spring Configuration created a Spring bean named springSessionRepositoryFilter
that implements Filter
.
The springSessionRepositoryFilter
bean is responsible for replacing the HttpSession
with a custom implementation that is backed by Spring Session.
In order for our Filter
to do its magic, we need to instruct Spring to load our session.xml
configuration.
We do so with the following configuration:
link:{samples-dir}spring-session-sample-xml-jdbc/src/main/webapp/WEB-INF/web.xml[role=include]
link:{samples-dir}spring-session-sample-xml-jdbc/src/main/webapp/WEB-INF/web.xml[role=include]
The {docs-url}/spring/docs/{spring-core-version}/spring-framework-reference/core.html#context-create[ContextLoaderListener
] reads the contextConfigLocation
and picks up our session.xml configuration.
Last, we need to ensure that our Servlet Container (that is, Tomcat) uses our springSessionRepositoryFilter
for every request.
The following snippet performs this last step for us:
link:{samples-dir}spring-session-sample-xml-jdbc/src/main/webapp/WEB-INF/web.xml[role=include]
The {docs-url}/spring-framework/docs/{spring-core-version}/javadoc-api/org/springframework/web/filter/DelegatingFilterProxy.html[DelegatingFilterProxy
] looks up a bean named springSessionRepositoryFilter
and casts it to a Filter
.
For every request on which DelegatingFilterProxy
is invoked, the springSessionRepositoryFilter
is invoked.
This section describes how to work with the httpsession-jdbc-xml
Sample Application.
You can run the sample by obtaining the {download-url}[source code] and invoking the following command:
$ ./gradlew :spring-session-sample-xml-jdbc:tomcatRun
You should now be able to access the application at http://localhost:8080/
Now you can try using the application. To do so, fill out the form with the following information:
-
Attribute Name: username
-
Attribute Value: rob
Now click the Set Attribute button. You should now see the values displayed in the table.
We interact with the standard HttpSession
in the following SessionServlet
:
link:{samples-dir}spring-session-sample-xml-jdbc/src/main/java/sample/SessionServlet.java[role=include]
Instead of using Tomcat’s HttpSession
, we persist the values in the H2 database.
Spring Session creates a cookie named SESSION
in your browser. That cookie contains the ID of your session.
You can view the cookies (with Chrome or Firefox).
You can remove the session by using H2 web console available at: http://localhost:8080/h2-console/ (use jdbc:h2:mem:testdb
for JDBC URL)
Now you can visit the application at http://localhost:8080/ and observe that the attribute we added is no longer displayed.