{"action":"created","issue":{"url":"https://api.github.com/repos/spring-projects/spring-session/issues/234","labels_url":"https://api.github.com/repos/spring-projects/spring-session/issues/234/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-session/issues/234/comments","events_url":"https://api.github.com/repos/spring-projects/spring-session/issues/234/events","html_url":"https://github.com/spring-projects/spring-session/issues/234","id":92469415,"number":234,"title":"Client Side Sessions","user":{"login":"cemo","id":44156,"avatar_url":"https://avatars.githubusercontent.com/u/44156?v=3","gravatar_id":"","url":"https://api.github.com/users/cemo","html_url":"https://github.com/cemo","followers_url":"https://api.github.com/users/cemo/followers","following_url":"https://api.github.com/users/cemo/following{/other_user}","gists_url":"https://api.github.com/users/cemo/gists{/gist_id}","starred_url":"https://api.github.com/users/cemo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cemo/subscriptions","organizations_url":"https://api.github.com/users/cemo/orgs","repos_url":"https://api.github.com/users/cemo/repos","events_url":"https://api.github.com/users/cemo/events{/privacy}","received_events_url":"https://api.github.com/users/cemo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-07-01T19:43:15Z","updated_at":"2015-07-24T20:59:09Z","closed_at":null,"body":"I have seen a few framework such as [ninja] storing sessions in user cookies. In our applications we are not heavily storing so much informations at sessions and using them rarely. It would be nice to have a client base session implementation.\r\n\r\n\r\n[ninja]: http://www.ninjaframework.org/documentation/basic_concepts/sessions.html"},"comment":{"url":"https://api.github.com/repos/spring-projects/spring-session/issues/comments/124721646","html_url":"https://github.com/spring-projects/spring-session/issues/234#issuecomment-124721646","issue_url":"https://api.github.com/repos/spring-projects/spring-session/issues/234","id":124721646,"user":{"login":"rwinch","id":362503,"avatar_url":"https://avatars.githubusercontent.com/u/362503?v=3","gravatar_id":"","url":"https://api.github.com/users/rwinch","html_url":"https://github.com/rwinch","followers_url":"https://api.github.com/users/rwinch/followers","following_url":"https://api.github.com/users/rwinch/following{/other_user}","gists_url":"https://api.github.com/users/rwinch/gists{/gist_id}","starred_url":"https://api.github.com/users/rwinch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rwinch/subscriptions","organizations_url":"https://api.github.com/users/rwinch/orgs","repos_url":"https://api.github.com/users/rwinch/repos","events_url":"https://api.github.com/users/rwinch/events{/privacy}","received_events_url":"https://api.github.com/users/rwinch/received_events","type":"User","site_admin":false},"created_at":"2015-07-24T20:59:09Z","updated_at":"2015-07-24T20:59:09Z","body":"@cemo I am quite hesitant to add client side sessions. Generally speaking they are very difficult to get right and inertially less secure. For more information see the discussion on #186\r\n\r\nTo add to the above link. It seems odd that users want to shove their user information in a cookie. If you have a person service, would you try to encode the user's name in the person id so that you don't need to look up the name? If not, then why would you do that for a session (which is much more critical than the user's name).\r\n\r\nWith all that said, I'm still going to leave this issue open to see how much interest there is. However, at this point I don't see this making it into 1.1."}}