获取控制器中Spring启动/安全性的会话令牌

Question

We are using spring boot with spring security to implement a querying interface. What I want to do is to only allow a fixed number of queries per user to run at a time. Queries may take a long time and users may send repeated requests faster than we can respond. I want the controller to only ever be calculating a subset request at a time and I'll have to implement some logic as to which requests to respond to.

To do this, I need to know the session token for the given user. Is there an easy way to get this in the controller's methods?

Answer 1

I find it easier to add the parameter 'HttpSession session' in your request mapping:

@GetMapping(value = "/hello")  
public String home(HttpSession session) {  
    String sessionId = session.getId();  
    System.out.println("[session-id]: " + sessionId);  

    ...

    return "anyPage";  
}

Answer 2

如果要在控制器中获取sessionId，可以使用RequestContextHolder.currentRequestAttributes().getSessionId();