DongHyeonkaandClaude Opus 5
f2595f748f
Adding Spring Session Redis grows the context by 81 beans and swaps sessionRepository for RedisSessionRepository, while authorizedClientService stays InMemoryOAuth2AuthorizedClientService. The user then reads as logged in with principal labuser while accessTokenStoredOnServer is false, which is worse than being logged out. Redis holds only the security context, serialized with Java native serialization, and the refresh token is not there to encrypt in the first place. Three problems on the way: Kubernetes service links overwrote REDIS_PORT with a tcp:// URL, the tests tried to reach Redis, and the resource server was never deployed so a DNS failure looked like a token failure. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
22 lines
1.6 KiB
Plaintext
22 lines
1.6 KiB
Plaintext
=== Redis 에 무엇이 들어 있는가 ===
|
|
bff:session:sessions:8963b6de-3564-4775-9ccd-1ee9616b83ae
|
|
총 키 수: 1
|
|
|
|
=== 세션 키의 내용 — refresh token 이 있는가 (Q3 검증 2번) ===
|
|
키: bff:session:sessions:8963b6de-3564-4775-9ccd-1ee9616b83ae
|
|
타입: hash
|
|
필드: sessionAttr:SPRING_SECURITY_CONTEXT
|
|
필드: sessionAttr:SPRING_SECURITY_SAVED_REQUEST
|
|
필드: sessionAttr:SPRING_SECURITY_LAST_EXCEPTION
|
|
필드: sessionAttr:org.springframework.security.oauth2.client.web.HttpSessionOAuth2AuthorizationRequestRepository.AUTHORIZATION_REQUEST
|
|
필드: lastAccessedTime
|
|
필드: maxInactiveInterval
|
|
필드: creationTime
|
|
|
|
=== 필드 값에 토큰 문자열이 보이는가 ===
|
|
1) "sessionAttr:SPRING_SECURITY_CONTEXT"
|
|
2) "\xac\xed\x00\x05sr\x00=org.springframework.security.core.context.SecurityContextImpl\x00\x00\x00\x00\x00\x00\x02l\x02\x00\x01L\x00\x0eauthenticationt\x002Lorg/springframework/security/core/Authentication;xpsr\x00Sorg.springframework.security.oauth2.client.authentication.OAuth2AuthenticationToken\x00\x00\x00\x00\x00\x00\x02l\x02\x00\x02L\x00\x1eauthorizedClientRegistrationIdt\x00\x12Ljava/lang/String;L\x00\tprincipalt\x00:Lorg/springframework/security/oauth2/core/user/OAuth2User;xr\x00Gorg.springframework.security.authentication.AbstractAuthenticationToken\xd3\xaa(~nGd\x0e\x02\x00\x03Z\x00\rauthenticatedL\x00\x0bauthoritiest\x00\x16Ljava/util/Collection;L\x00\adetailst\x00\x12Ljava/lang/Object;xp\x01sr\x00&java.util.Collections$UnmodifiableList\xfc\x0f%1\xb5\xec\x8e\x10\x02\x00\x01L\x00\x04listt\x00\x10Ljava/util/List;xr\x00,java.util.Collect
|
|
|
|
=== TTL (Q3 검증 3번 — session TTL) ===
|
|
TTL: 1772 초
|