Share session not working

[krajcikondra]

Hi,

I am using symfony 5 with web server running by following command:
symfony server:start
and websocket server by command

php bin/console gos:websocket:server
Web server running on 127.0.0.1:8000
Websocket server running on 127.0.0.1:8888

I am using session store in database.

My configuration

gos_web_socket:
    server:
        port: 8888        # The port the socket server will listen on
        host: 127.0.0.1   # The host ip to bind to
        router:
            resources:
                - '%kernel.project_dir%/config/pubsub/routing.yaml'
    client:
        firewall: main # Can be an array of firewalls
        session_handler: 'session.handler.pdo'

services:
    app.websocket.topic.acme:
        class: App\Websocket\Topic\AcmeTopic
        tags:
            - { name: gos_web_socket.topic }

    session.handler.pdo:
        class: Symfony\Component\HttpFoundation\Session\Storage\Handler\PdoSessionHandler
        arguments:
            - !service { class: PDO, factory: ['@database_connection', 'getWrappedConnection'] }
            - { lock_mode: 0 }

And when i dump sessionId in AcmeTopic::onPublish method

   public function onPublish(
        ConnectionInterface $connection,
        Topic $topic,
        WampRequest $request,
        $event,
        array $exclude,
        array $eligible
    ): void {

    	var_dump($event);
    	$this->logger->log('info', 'sessionId = ' . $connection->WAMP->sessionId);
    	var_dump('session', $connection->WAMP->sessionId);
    	...

framework.yaml

framework:
    secret: '%env(APP_SECRET)%'
    #csrf_protection: true
    #http_method_override: true

    # Enables session support. Note that the session will ONLY be started if you read or write from it.
    # Remove or comment this section to explicitly disable session support.
    session:
        handler_id: 'session.handler.pdo'
        name: 'PHPSESSID' # in php.ini is session name set to PHPSESSID too
        cookie_secure: auto
#        cookie_samesite: lax

then i get different sessionId (anonymouse) as expected.

Know somebody what I do wrong?

[mbabker]

What's the cookie domain set on the session cookie? IIRC, it defaults to localhost so if you're accessing by IP address then the cookie might not be getting parsed by Ratchet when the websocket request comes through. You can see what cookies it processes to work out how to map the session by dumping inside the Ratchet\Session\SessionProvider class.

[krajcikondra]

I access to my application via virtual hosts in nginx on url myapp.test which is redirected to docker container where running webserver and websocker server.

\Ratchet\Session\SessionProvider::parseCookie

array(13) {
  ["domain"]=>
  NULL
  ["path"]=>
  string(1) "/"
  ["max_age"]=>
  NULL
  ["expires"]=>
  NULL
  ["version"]=>
  NULL
  ["secure"]=>
  NULLIn dump
  ["port"]=>
  NULL
  ["discard"]=>
  bool(false)
  ["comment"]=>
  NULL
  ["comment_url"]=>
  NULL
  ["http_only"]=>
  bool(false)
  ["cookies"]=>
  array(2) {
    ["BEARER"]=>
    string(516) "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpYXQiOjE2MjMzMzkyMDEsImV4cCI6MTYyMzM0MjgwMSwicm9sZXMiOlsiSVNfQVVUSEVOVElDQVRFRF9GVUxMWSIsIlJPTEVfQURNSU4iXSwibmlja25hbWUiOiJhZG1pbiJ9.gEpECugY7pgu0dkTCUpST12A8MZX7eGl84EXkG41oiAL-JGERE_WORPPldUK2iDGKbunhXAqnPiVS7A0XJtaYjjfTJ6BbD5PJxO4V8UU1RS2V9RVqr2ucTSI39UQ1KNks1mMLwfov_t5fapMtciwVqsN0j_uc06AEEI7qAa51k76ZCm9bPhGTaWiQdsZAr78xehSIx49ZDHaU2gNeGYOI7rbj4KlJ4RR_tW5W3LzAFz8FeXOy3D-llsj8y-qglIoXChKhpPdT5ge6hdT2F_CETF5Uc5FAABZBgbsDtYWbitLMp1docxK5iqb-8YeO9s3uM5WJvHR0x76UZkUk3qzdA"
    ["PHPSESSID"]=>
    string(32) "be310cd1cadb058404fd4f66226b6edd"
  }
  ["data"]=>
  array(0) {
  }
}

PHPSESSID is correct in dump but a am not sure if domain => NULL is correct.

[mbabker]

The domain being null looks fine:

$bin/console gos:websocket:server
array:13 [
  "domain" => null
  "path" => "/"
  "max_age" => null
  "expires" => null
  "version" => null
  "secure" => null
  "port" => null
  "discard" => false
  "comment" => null
  "comment_url" => null
  "http_only" => false
  "cookies" => array:1 [
    "PHPSESSID" => "538fsogjp0mkahi5ehragvcalq"
  ]
  "data" => []
]

Are you trying to get the actual session ID, or the connection ID? $connection->WAMP->sessionId is a randomly generated ID for the connection by the Ratchet\Wamp\WampConnection class. If you're trying to get to the actual session ID, you'd need to go through $connection->Session->getId() instead (where $connection->Session is a Symfony\Component\HttpFoundation\Session\Session instance).

[krajcikondra]

oh, my fault.Thanks. I thought that I get session Id by $connection->WAMP->sessionId. In $connection->Session->getId() is correct value.
But when I dump current user

    	$user = $this->clientManipulator->getUser($connection);
    	var_dump($user);

get
anon-102548907060c241bec12d4770061357

but I need current user UserIntarface, not anonymouse string.

Do you have some idea what I do wrong?

[krajcikondra]

I dumped driver in \Gos\Bundle\WebSocketBundle\Client\ClientStorage and driver is instance of \Gos\Bundle\WebSocketBundle\Client\Driver\InMemoryDriver

Need I some other storage when I have stored session in postgre database?

[mbabker]

IIRC (I haven't used the in memory driver in a while, so I don't remember clearly), the storage shouldn't matter here. It's just storing whatever token was extracted from the session.

You've got the bundle here configured to read the user from your main firewall, if your user is authenticated to another firewall then that would cause the auth provider to return an anonymous token (and inherently the anonymous user string). Double check the firewall settings to make sure you've got the right firewall in place.

You can dump in Gos\Bundle\WebSocketBundle\Client\Auth\WebsocketAuthenticationProvider to make sure it's pulling the right data.