Wings user union login

[trydofor]

Wings system can be associated with the login, similar to the SSO.

• Ensure the independence of Wings account privilege system
• Convenient SSO login
• token recovery and kicking out of dangerous accounts.

Within a unified Hazelcast cluster, session sharing is possible.
Non-cluster, to consider on-demand network invocation.

• OAuth2/Oidc is more complex, and the token cannot be invalidated
• SAML/CAS http-based BS architecture

[trydofor]

Consider using header: Auth-Ticket to build internal tokens based on Tickets

[trydofor]

The lightest non-intrusive solution is HttpSessionIdResolver

• No changes to each app's own auth system, independent of each other
• Union sessionId, get the current app's sid based on the sid mapping relationship
• Authentication pull, logout push
• global unique id

HttpSessionEventPublisher

[trydofor]

#82

[trydofor]

spring-projects/spring-session#11

fixed at 3.2.0 of Session and SpringBoot