samedi 28 mars 2015

ConcurrentSessionControlStrategy can invalidate session or just set expire field = true while sessision is exceed maximumSessions?

Hi i am using Spring security version 3.1.

now i want to ask ,

can we direct invalidate user session when sessions count exceeds limit from maximumSessions value field which is mention in ConcurrentSessionControlStrategy.

in my cenario,

maximumSessions value is 1.

I restrict that only single user can have only single sessions. and if other session for that user login then old session will distroy from session list. but right now the entry of that old session is visible in manager till i will perform any action in old session.

because of they just set expire field as true.


Aucun commentaire:

Enregistrer un commentaire