Distributed session on IMDG

Most of our customers build API or microservices to serve Single Page Application on Browser or Native applications on devices. For security reasons, we normally don’t send JWT tokens to Browser unless JWE is applied. In order to secure the SPA, the session will be used between Browser and Web Server. For high availability, we need to have multiple instances of web servers behind a reverse proxy (F5, etc.), and sessions need to be replicated between all instances.

Currently, we support the distributed session with Hazelcast, Redis and JDBC database.