diff --git a/src/main/kotlin/com/reditus/novelcia/global/security/SessionUtils.kt b/src/main/kotlin/com/reditus/novelcia/global/security/SessionUtils.kt index e178ac9..eb3f778 100644 --- a/src/main/kotlin/com/reditus/novelcia/global/security/SessionUtils.kt +++ b/src/main/kotlin/com/reditus/novelcia/global/security/SessionUtils.kt @@ -17,5 +17,4 @@ fun HttpSession.getLoginUserDetails(): LoginUserDetails? { fun HttpSession.setLoginUserDetails(userModel: UserModel) { this.setAttribute("userId", userModel.id) this.setAttribute("role", userModel.role.name) - this.maxInactiveInterval = 60 * 60 // 1시간 } \ No newline at end of file diff --git a/src/main/kotlin/com/reditus/novelcia/global/security/WebSecurityConfig.kt b/src/main/kotlin/com/reditus/novelcia/global/security/WebSecurityConfig.kt index caad774..c341188 100644 --- a/src/main/kotlin/com/reditus/novelcia/global/security/WebSecurityConfig.kt +++ b/src/main/kotlin/com/reditus/novelcia/global/security/WebSecurityConfig.kt @@ -45,7 +45,10 @@ class WebSecurityConfig( @Bean fun securityFilterChain(http: HttpSecurity): SecurityFilterChain { http.csrf{it.disable()} - http.sessionManagement{ it.sessionCreationPolicy(SessionCreationPolicy.STATELESS)} + http.sessionManagement{ + it.sessionCreationPolicy(SessionCreationPolicy.NEVER) + it.sessionFixation().none() + } http.formLogin{it.disable()} http.httpBasic{it.disable()} http.logout{it.disable()} diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml index 9998ebe..f15fa57 100644 --- a/src/main/resources/application.yaml +++ b/src/main/resources/application.yaml @@ -32,6 +32,8 @@ spring: # test profile session: redis: namespace: novelcia + flush-mode: on_save + timeout: 3600 lifecycle: timeout-per-shutdown-phase: 15s # 스프링이 종료될때 모든 작업이 종료될때 까지 기다리는 시간 task: