Tuesday, January 20, 2009

Tip: Single Session Control - Spring Security

If anyone wants to apply Single Session Control to logged in user do the following steps.


1) in web.xml add a listner.

 
   1:  <listener>
   2:      <listener-class>org.springframework.security.ui.session.HttpSessionEventPublisher</listener-class>    
   3:  </listener>

2)In Spring security configuration
   1:  <http>
   2:      ...
   3:      <concurrent-session-control max-sessions="1" exception-if-maximum-exceeded="true"/>
   4:  </http>

No comments: