RedisOperationsSessionRepository: SessionCreatedEvents don't contain RedisSession -> Session-Attributes cannot be modified in Listeners

In our project we use org.springframework.session.web.http.SessionEventHttpSessionListenerAdapter to handle SessionCreatedEvents. Unfortunately, the RedisOperationsSessionRepository only publishes SessionCreatedEvents containing a MapSession, instead of a RedisSession:

spring-session/spring-session-data-redis/src/main/java/org/springframework/session/data/redis/RedisOperationsSessionRepository.java

Lines 586 to 590 in 0c9fbed

	private void handleCreated(Map<Object, Object> loaded, String channel) {
	String id = channel.substring(channel.lastIndexOf(":") + 1);
	Session session = loadSession(id, loaded);
	publishEvent(new SessionCreatedEvent(this, session));
	}

Due to this, attributes set to this session by Listeners (e.g. org.springframework.web.util.HttpSessionMutexListener) will not be saved to Redis and are lost. This was not expected behaviour for us.

Changing Line 588 to
Session session = new RedisSession(loadSession(id, loaded));
as in

spring-session/spring-session-data-redis/src/main/java/org/springframework/session/data/redis/RedisOperationsSessionRepository.java

Line 474 in 0c9fbed

RedisSession result = new RedisSession(loaded);

would propably solve the issue, but I don't know, whether this would induce other problems.

[adamklinkosz]

I'm having the same issue. Any news on this one?

[vpavic]

I ran into this issue while working on some unrelated changes in RedisIndexedSessionRepository - see #2171.