jeudi 2 avril 2015

ConcurrentSessionControlStrategy can invalidate session or just set expire field = true while sessision is exceed maximumSessions?

Hi I am using Spring security version 3.1.

I want to ask can we direct invalidate user session when sessions count exceeds limit from maximumSessions value field which is mentioned in ConcurrentSessionControlStrategy.

In my scenario, maximumSessions value is 1.

I restrict that only single user can have only single sessions. And if there exists another session for that user login then the old session will be destroyed from the session list. But right now the entry of that old session is visible in manager until I perform any action in old session.

Because of they just set expire field as true.


Aucun commentaire:

Enregistrer un commentaire