fix: Clear all session for Spring upgrade (#36695)

This commit is contained in:
Nidhi 2024-10-07 10:31:11 +05:30 committed by GitHub
parent b447e6a829
commit 67c9ae2a27
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -3,36 +3,25 @@ package com.appsmith.server.migrations.db.ce;
import io.mongock.api.annotations.ChangeUnit; import io.mongock.api.annotations.ChangeUnit;
import io.mongock.api.annotations.Execution; import io.mongock.api.annotations.Execution;
import io.mongock.api.annotations.RollbackExecution; import io.mongock.api.annotations.RollbackExecution;
import lombok.RequiredArgsConstructor;
import lombok.extern.slf4j.Slf4j; import lombok.extern.slf4j.Slf4j;
import org.springframework.data.redis.core.ReactiveRedisOperations; import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.data.redis.core.script.RedisScript; import org.springframework.data.redis.core.ReactiveRedisTemplate;
import reactor.core.publisher.Flux;
@RequiredArgsConstructor
@Slf4j @Slf4j
@ChangeUnit(order = "063", id = "reset_session_oauth2_spring_3_3") @ChangeUnit(order = "063", id = "reset_session_oauth2_spring_3_3")
public class Migration063CacheBustSpringBoot3_3 { public class Migration063CacheBustSpringBoot3_3 {
private final ReactiveRedisOperations<String, String> reactiveRedisOperations;
@RollbackExecution @RollbackExecution
public void rollbackExecution() {} public void rollbackExecution() {}
@Execution @Execution
public void execute() { public void execute(
doClearRedisOAuth2AuthClientKeys(reactiveRedisOperations); @Qualifier("reactiveRedisTemplate") final ReactiveRedisTemplate<String, Object> reactiveRedisTemplate) {
} reactiveRedisTemplate
.getConnectionFactory()
public static void doClearRedisOAuth2AuthClientKeys( .getReactiveConnection()
ReactiveRedisOperations<String, String> reactiveRedisOperations) { .serverCommands()
final String authorizedClientsKey = .flushDb()
"sessionAttr:org.springframework.security.oauth2.client.web.server.WebSessionServerOAuth2AuthorizedClientRepository.AUTHORIZED_CLIENTS"; .block();
final String script =
"for _,k in ipairs(redis.call('keys','spring:session:sessions:*')) do local fieldExists = redis.call('hexists', k, '"
+ authorizedClientsKey + "'); if fieldExists == 1 then redis.call('del', k) end end";
final Flux<Object> flushdb = reactiveRedisOperations.execute(RedisScript.of(script));
flushdb.blockLast();
} }
} }