@SessionAttributes和@ResponseBody同时使用出现Cannot create a session after the response has been committed

前端获取验证码图片时出现GET http://localhost:8080/code net::ERR_INCOMPLETE_CHUNKED_ENCODING 200错误

后端报错

严重 [http-nio-8080-exec-1] org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed; nested exception is java.lang.IllegalStateException: Cannot create a session after the response has been committed] with root cause
	java.lang.IllegalStateException: Cannot create a session after the response has been committed
		at org.apache.catalina.connector.Request.doGetSession(Request.java:2993)
		at org.apache.catalina.connector.Request.getSession(Request.java:2432)
		at org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:908)
		at org.springframework.web.context.request.ServletRequestAttributes.getSession(ServletRequestAttributes.java:116)
		at org.springframework.web.context.request.ServletRequestAttributes.obtainSession(ServletRequestAttributes.java:138)
		at org.springframework.web.context.request.ServletRequestAttributes.setAttribute(ServletRequestAttributes.java:181)
		at org.springframework.web.bind.support.DefaultSessionAttributeStore.storeAttribute(DefaultSessionAttributeStore.java:55)
		at org.springframework.web.method.annotation.SessionAttributesHandler.lambda$storeAttributes$0(SessionAttributesHandler.java:117)
		at java.util.LinkedHashMap.forEach(LinkedHashMap.java:684)
		at org.springframework.web.method.annotation.SessionAttributesHandler.storeAttributes(SessionAttributesHandler.java:115)
		at org.springframework.web.method.annotation.ModelFactory.updateModel(ModelFactory.java:197)
		at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.getModelAndView(RequestMappingHandlerAdapter.java:1004)
		at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:900)
		at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:800)
		at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)
		at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1038)
		at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:942)
		at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1005)
		at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:897)
		at javax.servlet.http.HttpServlet.service(HttpServlet.java:634)
		at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:882)
		at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
		at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
		at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
		at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
		at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
		at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
		at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)
		at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
		at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
		at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
		at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)
		at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
		at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:526)
		at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
		at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
		at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
		at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
		at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
		at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)
		at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
		at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:860)
		at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1589)
		at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
		at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
		at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
		at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
		at java.lang.Thread.run(Thread.java:748)

@Controller
@SessionAttributes("authCode")
public class AuthCodeController {

    // 注意如果不指定MediaType（相当于设置Content-Type）,会出现错误
    @GetMapping(value = "/code", produces = MediaType.IMAGE_JPEG_VALUE)
    public @ResponseBody
    BufferedImage getCodeImage(Model model) throws IOException {
        String code = AuthCodeUtil.getAuthCode();
        model.addAttribute("authCode", code);
        return AuthCodeUtil.getAuthImg(code);
    }
}

原因：在响应提交后创建session,更深层次的原因有时间在探究

临时解决方法
暂时先在方法中添加HttpSession 参数使SpringMVC在提交前先创建session

@Controller
public class AuthCodeController {

    // 注意如果不指定MediaType（相当于设置Content-Type）,会出现错误
    @GetMapping(value = "/code", produces = MediaType.IMAGE_JPEG_VALUE)
    public @ResponseBody
    BufferedImage getCodeImage(HttpSession session) throws IOException {
        String code = AuthCodeUtil.getAuthCode();
        session.setAttribute("authCode", code);
        return AuthCodeUtil.getAuthImg(code);
    }
}