State can be shared cross different websockets

[asvetin]

This implementation can cause issues and inconsistency. As ServerEndpointConfig is shared across different WebSockets.
It can happen that 2 WebSockets/Sessions will have the same ID

iris-router/src/main/java/org/iris_events/router/ws/WsContainerConfigurator.java

Lines 19 to 25 in 459b8e2

	public void modifyHandshake(ServerEndpointConfig sec, HandshakeRequest request, HandshakeResponse response) {
	String irisSessionId = UUID.randomUUID().toString();
	sec.getUserProperties().put(IRIS_SESSION_ID_HEADER, irisSessionId);
	response.getHeaders().put(IRIS_SESSION_ID_HEADER, List.of(irisSessionId));
	sec.getUserProperties().put("headers", request.getHeaders());
	}

This issue is propagated forward here using EndpointConfig, which is also shared across the requests

iris-router/src/main/java/org/iris_events/router/ws/SocketV1.java

Lines 96 to 100 in 459b8e2

	public void onOpen(Session session, EndpointConfig conf) {
	try {
	final var irisSessionId = (String) conf.getUserProperties().get(IRIS_SESSION_ID_HEADER);
	MDC.put(MDCProperties.SESSION_ID, irisSessionId);

[asvetin]

@ctomc I think we need to check and fix this one also

iris-router/src/main/java/org/iris_events/router/model/UserSession.java

Lines 97 to 105 in bf37b38

	public UserSession(ObjectMapper objectMapper, Session session, Map<String, List<String>> headers) {
	this.objectMapper = objectMapper;
	this.session = Objects.requireNonNull(session);
	this.socketId = (String) session.getUserProperties().get(IRIS_SESSION_ID_HEADER);
	this.anonymousUserId = generateAnonymousUserId(socketId);
	this.userId = anonymousUserId;
	this.anonymous = true;
	this.connectedAt = Instant.now();

Once this is called, null is returned

iris-router/src/main/java/org/iris_events/router/model/UserSession.java

Lines 110 to 114 in bf37b38

	}
	public String getId() {
	return socketId;
	}

So I guess we have to pass the session ID here

iris-router/src/main/java/org/iris_events/router/ws/SocketV1.java

Lines 120 to 125 in bf37b38

	Log.infof("Web socket opened.");
	var userSession = websocketRegistry.startSession(session, headers);
	conf.getUserProperties().put("user-session", userSession);

[ctomc]

You are correct, that needs fixing