ESB-1293 Secured cookies when ENTANDO_SECURE_SECRET_COOKIES is set

[MEM2677]

• RedisSessionConfig now provides the CookieSerializer bean that Spring Session uses for its session cookie when Redis sessions are on.
  • That cookie gets Secure when ENTANDO_SECURE_SECRET_COOKIES is true, or, when it is unset, when ENTANDO_APP_USE_TLS is true, the same rule JSESSIONID already follows.
  • When neither switch is on, the cookie gets Secure only for requests the container sees as HTTPS, as before.
  • The cookie keeps the name, domain, path and max-age from the container's session cookie config, so existing sessions stay valid after the upgrade.
  • The application logs one line at startup when it turns on Secure for the Spring Session cookie.
  • The new RedisSessionConfigTest adds five unit tests for the switch rule, Secure over HTTP, the fallback, the copied cookie settings and the default SESSION name.
  • RedisSessionActiveTest gains one test checking that Spring Session's session filter writes its cookie with the new bean, and loses an unused import.

[github-actions]

PUBLICATION for COMMIT ID ``

IMG/TAG: entando/entando-de-app-tomcat:7.5.3-ESB-1293-PR377
IMG/SHA: entando/entando-de-app-tomcat@sha256:59317bfccb79b8981331a4d5f685f155272c33c2f7384cf157ffc536f61bbda4

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
95.3% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

PUBLICATION for COMMIT ID ``

IMG/TAG: entando/entando-de-app-tomcat:7.5.3-ESB-1293-PR377
IMG/SHA: entando/entando-de-app-tomcat@sha256:4d5fce4637dde02348285fa38c81785719302df65635790f061117329eea7139

[github-actions]

PUBLICATION for COMMIT ID ``

IMG/TAG: entando/entando-de-app-tomcat:7.5.3-ESB-1293-PR377
IMG/SHA: entando/entando-de-app-tomcat@sha256:4673e2eae4e4d573ee1c18817400514e63dd0e9d96524b26602d78685d519495