Session destroy problem

[vijay kumar chauhan]

Dear Friends,

In our applcation we are using spring security framework for session management.

Now, In our index.jsp page we have to links as :

1. Login, and
2. Register Now

when I click on "Login" link(New Pop up Window comes) and
user login with his username and password successfuly and access his home.jsp page.
problem comes into picture when I minimize my successfully login home.jsp page and again click to "Register Now" link other pop up window comes for ANONYMOUS USER.Which in result overwrite or we can say destroy login users session.

It means for every link new session is creating.

But I don't want to destroy previous session until user click's on LOGOUT tag.

How can i resolve this issue...my application-context.xml looks as

<b:beans xmlns="http://www.springframework.org/schema/security"
    xmlns:b="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:tx="http://www.springframework.org/schema/tx"
    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
                        http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-2.0.xsd
                        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.2.xsd">


    <http auto-config="false" realm="realm" lowercase-comparisons="false" create-session="ifRequired" >
    
        <intercept-url pattern="/" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER"/>

         
        <!-- authentication for /index.jsp etc -->
        <intercept-url pattern="/index.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER"/>        
        <intercept-url pattern="/login.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER"/>
<intercept-url pattern="/home.jsp" access="ROLE_USER"/>
<intercept-url pattern="/register.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER"/>

Guide me friends..
thanks

[vijay kumar chauhan]

Hello Friends..

This issues is resolved by first verification that Is their is any session already exist through that browser if yse redirect it to that session configuration else to login page..

thank u all