Release 0.1: session-id hashing and PostgreSQL schema for the next RC #25

Merged

james.maes merged 2 commits from kof22/release-0.1-session-codec into release/0.1 2026-11-07 00:24:20 +00:00

Conversation 0 Commits 2 Files Changed 14

+1639 -191

james.maes commented 2026-11-07 00:18:10 +00:00

Owner

Copy link

Copy source

Brings the KOF22 session-store behaviour (merged to develop in #24) into release/0.1 so the next release candidate carries it: SessionCodec (hashed storage keys, raw session ids never stored or logged), StoredSessionSchema (PostgreSQL DDL), the reworked providers, and the JaCoCo/UTC build fix.

Only the two feature commits are cherry-picked; a plain develop merge would conflict on the revision line (0.1.0-RC.1 vs 0.2.0-SNAPSHOT), which stays untouched here.

Co-Authored-By: Claude Sonnet 5.5 noreply@anthropic.com

Brings the KOF22 session-store behaviour (merged to develop in #24) into release/0.1 so the next release candidate carries it: SessionCodec (hashed storage keys, raw session ids never stored or logged), StoredSessionSchema (PostgreSQL DDL), the reworked providers, and the JaCoCo/UTC build fix. Only the two feature commits are cherry-picked; a plain develop merge would conflict on the revision line (0.1.0-RC.1 vs 0.2.0-SNAPSHOT), which stays untouched here. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

james.maes added 2 commits 2026-11-07 00:18:11 +00:00

feat: hash session ids into storage keys and publish the PostgreSQL schema (KOF22 session-store integration) ... 175f294daa

Brings the KOF22-validated session-store behaviour onto develop:

- SessionCodec derives the storage key from a SHA-256 of a domain-separated
  session id, so a raw session id is never stored or logged.
- StoredSessionSchema publishes the PostgreSQL DDL for the stored-session table.
- The in-memory, Redis, shared-Redis and table-based providers and the
  stored-session table metadata use them.
- Tests: SessionCodecTest, a PostgreSQL integration test for the table
  provider, and the fixture endpoint; the PostgreSQL test needs
  qqq-backend-module-postgres (test scope) and a UTC JVM.

Source and test changes only; the POM keeps develop's Core RC.22 and
qbit-redis 0.1.0-RC.1 pins.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

build: keep the JaCoCo agent on the unit tests; run the PostgreSQL IT under a UTC JVM in failsafe ... b62bad42bf

The UTC argLine was set on surefire, replacing the argLine that jacoco prepare-agent
injects, so the unit tests ran without the agent and the class-coverage gate fell to
0.70 (min 0.80). The UTC setting belongs to failsafe, which runs the PostgreSQL IT;
it now appends to the jacoco argLine with @{argLine}, with an empty default property.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

james.maes merged commit 4a2fd280e2 into release/0.1 2026-11-07 00:24:20 +00:00

james.maes deleted branch kof22/release-0.1-session-codec 2026-11-07 00:24:21 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

release:rc

Merging this develop PR cuts the next release candidate

secuurity

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-session-store#25