docs: B-2 — sharing the stores fixes one problem and exposes three more

Browse Source

Moving the authorized client to JdbcOAuth2AuthorizedClientService makes tokens work across replicas, so the session-in-Redis plus tokens-in-PostgreSQL split holds. The table then shows what sharing cannot fix: the primary key is (client_registration_id, principal_name) with no session in it, so a second login for the same user updates the same row rather than adding one.

The refresh token sits in bytea as the raw JWT, readable with convert_from, and logout clears only the Redis session while the plaintext token row and the Keycloak SSO session both survive. The schema itself failed silently first because the default DDL uses blob, which PostgreSQL does not have, and continue-on-error swallowed it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

...

This commit is contained in:

DongHyeonka

2026-09-04 14:15:05 +09:00

co-authored by Claude Opus 5

parent f2595f748f

commit 711878379c

20 changed files with 534 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/evidence/b2-multi-instance-session/b2-before-relogin.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 18 KiB