Hi I am using Spring security version 3.1.
I want to ask can we direct invalidate user session when sessions count exceeds limit from maximumSessions
value field which is mentioned in ConcurrentSessionControlStrategy
.
In my scenario, maximumSessions
value is 1.
I restrict that only single user can have only single sessions. And if there exists another session for that user login then the old session will be destroyed from the session list. But right now the entry of that old session is visible in manager until I perform any action in old session.
Because of they just set expire field as true.
jeudi 2 avril 2015
ConcurrentSessionControlStrategy can invalidate session or just set expire field = true while sessision is exceed maximumSessions?
Inscription à :
Publier les commentaires (Atom)
Aucun commentaire:
Enregistrer un commentaire