Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added additional info on concurrent session usage

This commit is contained in:
Luke Taylor 2009-12-28 14:32:54 +00:00
parent 744ed95b51
commit 0aab19ed4b
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/manual/src/docbook/session-mgmt.xml
View File

@ -62,10 +62,14 @@
<para>Spring Security is able to prevent a principal from concurrently authenticating to the <para>Spring Security is able to prevent a principal from concurrently authenticating to the
same application more than a specified number of times. Many ISVs take advantage of this to same application more than a specified number of times. Many ISVs take advantage of this to
enforce licensing, whilst network administrators like this feature because it helps prevent enforce licensing, whilst network administrators like this feature because it helps prevent
people from sharing login names. You can, for example, stop user "Batman" from logging onto people from sharing login names. You can, for example, stop user <quote>Batman</quote> from
the web application from two different sessions.</para> logging onto the web application from two different sessions. You can either expire their
<para>This feature is supported by the namespace, so please check the earlier namespace chapter previous login or you can report an error when they try to log in again, preventing the second
for the simplest configuration. Sometimes you need to customize things though. </para> login. Note that if you are using the second approach, a user who has not explicitly logged
out (but who has just closed their browser, for example) will not be able to log in again
until their original session expires.</para>
<para>Concurrency control is supported by the namespace, so please check the earlier namespace
chapter for the simplest configuration. Sometimes you need to customize things though. </para>
<para>The implementation uses a specialized version of <para>The implementation uses a specialized version of
<interfacename>SessionAuthenticationStrategy</interfacename>, called <interfacename>SessionAuthenticationStrategy</interfacename>, called
<classname>ConcurrentSessionControlStrategy</classname>. <note><para>Previously the <classname>ConcurrentSessionControlStrategy</classname>. <note><para>Previously the