ServerRequestCacheWebFilter causes WebSession to be read every request

[rwinch]

Summary

Currently the ServerRequestCacheWebFilter causes the WebSession to be read on every request. We should be able to limit this to only happening after authentication success happens.

[rwinch]

One way we can do this is to cache the request in a cookie rather than the session

[jzheaux]

While this is a nice feature to be able to cache the request in a cookie, is it still the case that if an application wants to cache the request in a session, the WebSession will be hit on every request? Is this something that we should address in a separate ticket?

[rwinch]

The only place WebFlux support requires reading the session on every request is the request cache. This means that moving this to use a cookie will solve the problem. Another thing to point out is that we could solve this by adding a query parameter to the URL that signals a lookup should be performed.