| org.springframework.security.web.authentication.session |
|
Strategy interface and implementations for handling session-related behaviour for a newly authenticated user.
|
| Java Source File Name | Type | Comment |
| ConcurrentSessionControlStrategy.java | Class | Strategy which handles concurrent session-control, in addition to the functionality provided by the base class.
When invoked following an authentication, it will check whether the user in question should be allowed to proceed,
by comparing the number of sessions they already have active with the configured maximumSessions value.
The
SessionRegistry is used as the source of data on authenticated users and session data.
If a user has reached the maximum number of permitted sessions, the behaviour depends on the
exceptionIfMaxExceeded property. |
| NullAuthenticatedSessionStrategy.java | Class | |
| SessionAuthenticationException.java | Class | Thrown by an SessionAuthenticationStrategy to indicate that an authentication object is not valid for
the current session, typically because the same user has exceeded the number of sessions they are allowed to have
concurrently. |
| SessionAuthenticationStrategy.java | Interface | Allows pluggable support for HttpSession-related behaviour when an authentication occurs. |
| SessionFixationProtectionStrategy.java | Class | The default implementation of
SessionAuthenticationStrategy . |
