New session handler #404
New session handler #404
Conversation
…rotection and avoid unnecessary writes
|
Thank you so much for this feature! |
|
There are a few things left before 3.0 stable can be tagged https://github.com/snc/SncRedisBundle/milestone/2 - it should be relative safe to require 3.0-dev though, we try to keep things stable. |
|
Thing is that there's the major breaking change coming up to "fix phpredis logging". It'll be a biggie as it involves generating proxies and switching logging to an event listener instead of explicit. Once that one's done it'll mostly imply the other pending changes for 3.0 (reorganize services, private service locators etc.). We could tag |
Implement new Symfony 3.4+ session handler to gain session fixation protection and avoid unnecessary writes.
This breaks compatibility with Symfony 3.3 and below so it should be included in a major version only IMO, but we are going to use it in production soon.
Note that this includes #403 as I didn't want to introduce conflicts but I can easily undo that if needed.
Also note that with this, as Symfony will only write to the session when data actually changed, locking the session becomes a lot less necessary, as you have less chances of overwriting data with outdated one. At least if you don't use the session too much this is a big win in terms of throughput and number of commands redis has to deal with.
So: