fix: session timeout in cluster

[netroms]

Problem

When using a clustered setup with Redis enabled, the session timeout setting is not honored.

Cause

Session timeout must be set on the RedisIndexedSessionRepository when enabled, rather than only in the DhisHttpSessionEventListener, which is ignored when Spring Session is used.

Fix

Set the session timeout directly on the RedisIndexedSessionRepository on startup.
Use the NonRedisSessionConfig to set the session timeout with an event listener, only when Redis is not enabled.
Remove the redundant DhisHttpSessionEventListener class.

Manual test (minimal setup)

1. Start Redis locally
2. Enable Redis in config, redis.enabled = true (will assume port 6379 and localhost)
3. Set timeout to a low value, say 2 minutes, system.session.timeout = 120
4. Log in, and wait 2 min
5. Refresh the browser, observe you have to log in again.

Test without Redis enabled.

1. Disable Redis in config, redis.enabled = true
2. ... To the same as above

Manual test (multiple servers)

1. Do the same as above, but use 2 instances
2. Log in to one instance, observe you now are automatically logged in to the second instance
3. Wait 2 min
4. Refresh browser, observe you need to log in again in both instances.

JIRA: DHIS2-18460

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
1 Accepted issue

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud