build: 定时清理session

backend/framework/sdk/src/main/java/io/metersphere/sdk/config/ScheduleConfig.java

@@ -5,8 +5,10 @@ import io.metersphere.sdk.sechedule.ScheduleManager;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.scheduling.annotation.EnableScheduling;
 
 @Configuration
+@EnableScheduling
 public class ScheduleConfig {
 
     @Bean

backend/framework/sdk/src/main/java/io/metersphere/sdk/config/SessionConfig.java

@@ -1,15 +1,76 @@
 package io.metersphere.sdk.config;
 
 
+import com.fit2cloud.quartz.anno.QuartzScheduled;
 import io.metersphere.sdk.constants.SessionConstants;
+import io.metersphere.sdk.util.JSON;
+import io.metersphere.sdk.util.LogUtils;
+import jakarta.annotation.Resource;
+import org.apache.commons.lang3.StringUtils;
+import org.apache.commons.lang3.reflect.MethodUtils;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.data.redis.core.Cursor;
+import org.springframework.data.redis.core.ScanOptions;
+import org.springframework.data.redis.core.StringRedisTemplate;
+import org.springframework.session.data.redis.RedisIndexedSessionRepository;
 import org.springframework.session.web.http.HeaderHttpSessionIdResolver;
+
+import java.time.Duration;
+import java.time.temporal.ChronoUnit;
+import java.util.HashMap;
+import java.util.Map;
+
 @Configuration
 public class SessionConfig {
+    @Resource
+    private StringRedisTemplate stringRedisTemplate;
+    @Resource
+    private RedisIndexedSessionRepository redisIndexedSessionRepository;
 
     @Bean
     public HeaderHttpSessionIdResolver sessionIdResolver() {
         return new HeaderHttpSessionIdResolver(SessionConstants.HEADER_TOKEN);
     }
+
+
+    /**
+     * 清理没有绑定user的session
+     * redisson 有时会把ttl设置成-1 https://github.com/redisson/redisson/issues/4200
+     */
+    @QuartzScheduled(cron = "0 2 0 * * ?")
+    public void cleanSession() {
+        Map<String, Long> userCount = new HashMap<>();
+        ScanOptions options = ScanOptions.scanOptions().match("spring:session:sessions:*").count(1000).build();
+        try (
+                Cursor<String> scan = stringRedisTemplate.scan(options)
+        ) {
+            while (scan.hasNext()) {
+                String key = scan.next();
+                if (StringUtils.contains(key, "spring:session:sessions:expires:")) {
+                    continue;
+                }
+                String sessionId = key.substring(key.lastIndexOf(":") + 1);
+                Boolean exists = stringRedisTemplate.opsForHash().hasKey(key, "sessionAttr:user");
+                if (!exists) {
+                    redisIndexedSessionRepository.deleteById(sessionId);
+                } else {
+                    Object user = redisIndexedSessionRepository.getSessionRedisOperations().opsForHash().get(key, "sessionAttr:user");
+                    Long expire = redisIndexedSessionRepository.getSessionRedisOperations().getExpire(key);
+                    String userId = (String) MethodUtils.invokeMethod(user, "getId");
+                    Long count = userCount.getOrDefault(userId, 0L);
+                    count++;
+                    userCount.put(userId, count);
+                    LogUtils.info(key + " : " + userId + " 过期时间: " + expire);
+                    if (expire != null && expire.intValue() == -1) {
+                        redisIndexedSessionRepository.getSessionRedisOperations().expire(key, Duration.of(30, ChronoUnit.SECONDS));
+                    }
+                }
+            }
+
+            LogUtils.info(JSON.toJSONString(userCount));
+        } catch (Exception e) {
+            LogUtils.error(e);
+        }
+    }
 }