digicomp/flowsessionlock

Session locking for Neos Flow - it secures the session becoming corrupted by concurrent access to the same session by different requests

4.0.2 2023-01-26 12:04 UTC

Requires

• php: ^7.4 | ^8.1
• neos/flow: ^7.3.0 | ^8.2
• symfony/lock: ^5.2.0 | ^6.2.0

Requires (Dev)

• ext-pcntl: *

MIT

• Ferdinand Kuhl

• flow
• Neos

README

By default, the session established by Flow is not "protected" in any way. This package restricts every request to load the session only, if there are no other requests having it in access currently. It allows to set custom pointcut which will set the session in "ReadOnly" mode, which allows concurrent requests to read, but disallows the current request to write the session.

If you want to allow concurrent access somewhere, you can add your trigger pointcut in Settings.yaml like such:

DigiComp:
  FlowSessionLock:
    readOnlyExpressions:
      MyLock: "method(My\\Package\\Controller\\MyController->myAction())"