Get session token for Spring boot/security in controller

Question

We are using spring boot with spring security to implement a querying interface. What I want to do is to only allow a fixed number of queries per user to run at a time. Queries may take a long time and users may send repeated requests faster than we can respond. I want the controller to only ever be calculating a subset request at a time and I'll have to implement some logic as to which requests to respond to.

To do this, I need to know the session token for the given user. Is there an easy way to get this in the controller's methods?

Answer 1

If you want to get sessionId in controllers you can use RequestContextHolder.currentRequestAttributes().getSessionId();

Answer 2

I find it easier to add the parameter 'HttpSession session' in your request mapping:

@GetMapping(value = "/hello")  
public String home(HttpSession session) {  
    String sessionId = session.getId();  
    System.out.println("[session-id]: " + sessionId);  

    ...

    return "anyPage";  
}