Spring Session Bean GA Released
This post was authored by Vedran Pavić
On behalf of the community, I’m pleased to announce the general availability of Spring Session BOM Bean. This is the first release based on Spring Session 2.1 and can be easily consumed with freshly released Spring Boot 2.1. Please read on for the highlights of the release.
Same-Site Cookie support for HttpSession
integration
Same-Site Cookie is another mechanism that helps developers to protect from Cross-Site Request Forgery. Our DefaultCookieSerializer
has been enhanced to support adding SameSite
attribute to session cookie produced by Spring Session. The SameSite
attribute is enabled by default with value Lax
and is customizable using DefaultCookieSerializer#setSameSite
…