ConcurrentSessionControllerImpl possibly broken

[wpaciorkowski]

Hello Everybody.

I think that net.sf.acegisecurity.providers.ConcurrentSessionCo ntrollerImpl is broken. It should implement interface org.springframework.context.ApplicationListener to properly receive events. But it doesn't, and that couses this implementation not to react on HttpSessionDestroyedEvent which is published by HttpSessionEventPublisher.

Efect is that users can only login once in an application lifetime. I've managed to solve the problem by extending ConcurrentSessionControllerImpl and just adding that ApplicationListener to the 'implements' section.

My enviroment is: springframework-1.1.5, acegi-security-0.8 and jboss4.0.1.

Cheers,
Wojtek

[RayKrueger]

Wow. That must have been lost during a refactoring or something.
The test calls that method directly to ensure everything works as expected.

Good catch. This has been fixed in CVS, and a test has been put in to ensure it never happens again.