Improve session handling (#20)

Author: Sporiff

src/main/java/org/openpodcastapi/opa/config/SecurityConfig.java

@@ -48,7 +48,7 @@ public SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http) throws
         http
                 .csrf(csrf -> csrf.ignoringRequestMatchers("/api/**", "/docs", "/docs/**"))
                 .sessionManagement(sm -> sm
-                        .sessionCreationPolicy(SessionCreationPolicy.IF_REQUIRED)) // Stateless session
+                        .sessionCreationPolicy(SessionCreationPolicy.ALWAYS))
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers(publicPages).permitAll()
                         .requestMatchers(publicEndpoints).permitAll()

src/main/resources/application.yaml

@@ -32,6 +32,9 @@ spring:
     type: redis
   session:
     timeout: 7d
+    redis:
+      namespace: "spring:session"
+      flush-mode: on_save
 
 server:
   port: 8080