We've implemented session replication using Redisson, but we noticed that if
we intentionally fail a node, the user's sessions do get replicated, but
they're logged out when they're restored on the new server.

Is there a way to make this work properly so the user doesn't get logged out
during a failover event?

Most /More importantly, is there a technical or security reason for this?

If you look at the Tomcat code, they actively try and avoid serialization
the Security Principal:

Sent from:

To unsubscribe, e-mail:
For additional commands, e-mail:

Reply via email to