一：springsession简介

Spring Session是Spring的项目之一，GitHub地址：https://github.com/spring-projects/spring-session 
Spring Session把servlet容器实现的httpSession替换为spring-session，专注于解决session管理问题。
Spring Session提供了集群Session（Clustered Sessions）功能，默认采用外置的Redis来存储Session
数据，以此来解决Session共享的问题。

二：springsesion的配置

# session配置
server:
  session:
    timeout: 30
    cookie:
      secure: true
      http-only: true
    store-type: redis # 使用redis存储session

三：springsession配置cookie相关属性

package com.tohours.bdboot.config;

import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.session.web.http.CookieSerializer;
import org.springframework.session.web.http.DefaultCookieSerializer;


/**
 * springsession的配置
 */
@Configuration
public class SpringSessionConfig {
	

	//上下文
    @Value("${server.servlet.context-path}")
	private String contextPath;

    //secure
    @Value("${server.session.cookie.secure}")
    private Boolean secure;

    //http-only
    @Value("${server.session.cookie.http-only}")
	private Boolean httpOnly;
	
	
	@Bean
	  public CookieSerializer cookieSerializer() {
	    DefaultCookieSerializer serializer = new DefaultCookieSerializer();
	    serializer.setCookieName("JSESSIONID");
	    serializer.setCookiePath(contextPath);
	    serializer.setCookieMaxAge(3600);
	    serializer.setSameSite("None");  // SameSite
	    serializer.setUseHttpOnlyCookie(httpOnly);
	    serializer.setUseSecureCookie(secure);
	    return serializer;
	  }
}