Announcement Announcement Module
No announcement yet.
What is ConcurrentSessionFilter? Page Title Module
Move Remove Collapse
Conversation Detail Module
  • Filter
  • Time
  • Show
Clear All
new posts

  • What is ConcurrentSessionFilter?

    What is the actual work of this Filter?

  • #2
    From the DOCUMENTATION: 12.3 Concurrency Control

    Spring Security is able to prevent a principal from concurrently authenticating to the same application more than a specified number of times [...]

    To use concurrent session support, you'll need [register a listener in the web.xml: HttpSessionEventPublisher and] to add the ConcurrentSessionFilter to your FilterChainProxy
    Find in the documentation the complete example. An extract:
      <custom-filter position="CONCURRENT_SESSION_FILTER" ref="concurrencyFilter" />
      <custom-filter position="FORM_LOGIN_FILTER" ref="myAuthFilter" />
      <session-management session-authentication-strategy-ref="sas"/>
    Please, don't be offended, but unless you're a robot whose mission is sending POSTs for every single Filter in the Spring Security system, your best option is to read the documentation.

    You can start from the Standard Filter Aliases and Ordering table.