Unable to obtain SessionCookieConfig

[lglapinski]

Hi!

I have following configuration:

spring - 5.0.5
spring session - 5.0.4
spring session data redis - 2.0.2

During each deployment I see this:

WARN  RedisHttpSessionConfiguration$$EnhancerBySpringCGLIB$$35c2575f:174 - Unable to obtain SessionCookieConfig: Section 4.4 of the Servlet 3.0 specification does not permit this method to be called from a ServletContextListener that was not defined in web.xml, a web-fragment.xml file nor annotated with @WebListener

Configuration:

public class SecurityInitializer extends AbstractSecurityWebApplicationInitializer {
}

public class SessionInitializer extends AbstractHttpSessionApplicationInitializer {
}

public class WebAppInitializer extends AbstractAnnotationConfigDispatcherServletInitializer {

    @Override
    protected Class<?>[] getRootConfigClasses() {
        return new Class<?>[]{AppConfig.class, AsyncConfig.class, PersistenceConfig.class, RedisConfig.class,
                SchedulingConfig.class, SecurityConfig.class, WebMvcConfig.class};
    }

    @Override
    protected Class<?>[] getServletConfigClasses() {
        return null;
    }

    @Override
    protected String[] getServletMappings() {
        return new String[]{"/"};
    }

    @Override
    protected Filter[] getServletFilters() {
        return new Filter[]{
                new CharacterEncodingFilter("UTF-8", true)
        };
    }

@Configuration
@EnableRedisHttpSession
public class RedisConfig {
    @Value("${REDIS_ENDPOINT:localhost}")
    private String redisEndpoint;

    @Value("${REDIS_PORT:6379}")
    private Integer redisPort;

    @Bean
    public ConfigureRedisAction configureRedisAction() {
        return ConfigureRedisAction.NO_OP;
    }

    @Bean
    public LettuceConnectionFactory connectionFactory() {
        return new LettuceConnectionFactory(new RedisStandaloneConfiguration(redisEndpoint, redisPort));
    }

    @Bean
    RedisSerializer<Object> springSessionDefaultRedisSerializer() {
        return new CustomRedisSerializer();
    }
}

[vpavic]

Thanks for the report @lglapinski. Could you provide a sample app that we can use to reproduce this issue? Also which servlet container are you running your app in?

[lglapinski]

It's Apache Tomcat/8.0.47
I'm not able to repro that with plain new app. I will try to repro this issue and circle back.

[vpavic]

This issue can be reproduced using Spring Session's Java config based sample apps.

[guidev]

Same here when trying to use @EnableRedisHttpSession following https://docs.spring.io/spring-session/docs/current/reference/html5/guides/java-redis.html.

@EnableRedisHttpSession
@Log4j2
public class RedisConfig {

    @Bean
    public LettuceConnectionFactory connectionFactory() {
        RedisStandaloneConfiguration configuration = new RedisStandaloneConfiguration();
        configuration.setHostName("xxxxxxxx.eu-central-1-1.ec2.cloud.redislabs.com");
        configuration.setPort(15304);
        configuration.setPassword("xxxxxxxx");
        return new LettuceConnectionFactory(configuration);
    }
}


public class SessionInitializer extends AbstractHttpSessionApplicationInitializer {

    public SessionInitializer() {
        super(RedisConfig.class);
    }
}

Tomcat: 9.0.14 and 8.5.37
spring-webmvc: 5.1.4.RELEASE
spring-session-data-redis: 2.1.3.RELEASE
lettuce-core: 5.1.3.RELEASE

[vpavic]

As this works in app with XML based config, it appears the problem might be in Spring Framework - I've opened spring-projects/spring-framework#22319.

[vpavic]

Since this really appears to be a limitation in Spring Framework, I'm going to close this one as duplicate - please track spring-projects/spring-framework#22319 for further developments.