Search:

Thank's a lot.

What part of spring security invalidates SessionInformation after timeout?

For example this situation: User logs in. After some work he closes his browser without logout. His session still in...

Yes you are right. Here is my configuration:


<security:authentication-manager alias="authenticationManager" session-controller-ref="mwSessionController"/>

<security:http...

I solved this problem by totally implementing ConcurrentSessionController, sessionRegister (i need it a little bit different) and SessionRegistryUtils. In SessionRegistryUtils I've just modifiend...

If i set session-controller-ref and session-fixation-protection then concurrent session won't work at all because invalidateSessionOnSuccessfulAuthentication will be set to true and this will...

When I'm trying to get all online users from SessionRegistry with


sessionRegistry.getAllPrincipals()

I get an array of strings.
But I'm using my user-service with my own class implementing...