Rework session management, introduce Redis for session storing.

pom.xml

@@ -151,11 +151,6 @@
       <artifactId>htmlcleaner</artifactId>
       <version>2.21</version>
     </dependency>
-    <dependency>
-      <groupId>org.springframework</groupId>
-      <artifactId>spring-test</artifactId>
-      <version>5.0.1.RELEASE</version>
-    </dependency>
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
@@ -212,7 +207,6 @@
       <groupId>org.springframework</groupId>
       <artifactId>spring-test</artifactId>
       <version>5.0.7.RELEASE</version>
-      <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
@@ -226,5 +220,14 @@
       <version>1.4</version>
       <scope>test</scope>
     </dependency>
-  </dependencies>
+    <dependency>
+      <groupId>io.lettuce</groupId>
+      <artifactId>lettuce-core</artifactId>
+      <version>5.0.3.RELEASE</version>
+    </dependency>
+    <dependency>
+      <groupId>com.github.kstyrc</groupId>
+      <artifactId>embedded-redis</artifactId>
+      <version>0.6</version>
+    </dependency>  </dependencies>
 </project>

src/main/java/com/google/enterprise/secmgr/authncontroller/AuthnController.java

@@ -179,6 +179,7 @@ public AuthnResult authenticate(AuthnSession session, HttpServletRequest request
     if (request != null) {
       session.updateIncomingCookies(request);
     }
+    setupSessionCookies(session, response);
 
     AuthnResult result;
     switch (maybeForceAuthnState(session)) {
@@ -639,9 +640,6 @@ private void renderUniversalLoginForm(AuthnSession session, HttpServletRequest r
 
     logger.info(session.logMessage("Rendering Universal Login Form."));
     gsaLogger.log(session.getRequestId(), "Rendering Universal Login Form.");
-    if (null == SessionUtil.findGsaSessionId(request)) {
-      addAuthnSessionCookie(session, response);
-    }
     updateOutgoingCookies(session, response);
     PrintWriter writer = ServletBase.initNormalResponse(response);
     writer.print(session.getUniversalLoginForm()
@@ -651,6 +649,11 @@ private void renderUniversalLoginForm(AuthnSession session, HttpServletRequest r
     writer.close();
   }
 
+  public void setupSessionCookies(AuthnSession session,
+      HttpServletResponse response) {
+    addAuthnSessionCookie(session, response);
+  }
+
   private void addAuthnSessionCookie(AuthnSession session, HttpServletResponse response) {
     SessionView view = session.getSnapshot().getView();
     CookieStore outgoingCookies = GCookie.makeStore();