fix: remove session concurrency

closes #717
gotson · Nov 7, 2021 · ac05560 · ac05560
1 parent b972601
commit ac05560
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 6 deletions.
diff --git a/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt b/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/SecurityConfiguration.kt
@@ -10,7 +10,6 @@ import org.springframework.security.config.annotation.web.builders.HttpSecurity
 import org.springframework.security.config.annotation.web.builders.WebSecurity
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity
 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter
-import org.springframework.security.core.session.SessionRegistry
 import org.springframework.security.core.userdetails.UserDetailsService
 import org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest
 import org.springframework.security.oauth2.client.registration.InMemoryClientRegistrationRepository
@@ -32,7 +31,6 @@ class SecurityConfiguration(
   private val komgaUserDetailsLifecycle: UserDetailsService,
   private val oauth2UserService: OAuth2UserService<OAuth2UserRequest, OAuth2User>,
   private val oidcUserService: OAuth2UserService<OidcUserRequest, OidcUser>,
-  private val sessionRegistry: SessionRegistry,
   private val sessionCookieName: String,
   private val userAgentWebAuthenticationDetailsSource: WebAuthenticationDetailsSource,
   clientRegistrationRepository: InMemoryClientRegistrationRepository?,
@@ -78,10 +76,6 @@ class SecurityConfiguration(
         it.invalidateHttpSession(true)
       }
 
-      .sessionManagement()
-      .maximumSessions(10)
-      .sessionRegistry(sessionRegistry)
-
     if (oauth2Enabled) {
       http.oauth2Login { oauth2 ->
         oauth2.userInfoEndpoint {

diff --git a/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/session/SessionListener.kt b/komga/src/main/kotlin/org/gotson/komga/infrastructure/security/session/SessionListener.kt
@@ -0,0 +1,17 @@
+package org.gotson.komga.infrastructure.security.session
+
+import mu.KotlinLogging
+import org.springframework.context.event.EventListener
+import org.springframework.session.events.AbstractSessionEvent
+import org.springframework.stereotype.Component
+
+private val logger = KotlinLogging.logger {}
+
+@Component
+class SessionListener {
+
+  @EventListener
+  fun sessionEventLogging(event: AbstractSessionEvent) {
+    logger.debug { "${event.javaClass.simpleName}: ${event.sessionId}" }
+  }
+}