I'm using Spring-boot, spring-security and spring-session + redis. My web application stores a lot of information in HTTP Session, for example Controllers because it is JSF and I use ViewScope.
Do you have any ideas how to limit the classes that should be stored in redis? Or limit session attributes? Is there any option to choose which HTTP session data should be stored by spring-session in redis?
For example, I would like to store in redis only authentication-related data (Spring Security), but omit my old Controllers (controllers still need to be stored in HTTP session).