diff --git a/core/src/main/java/org/springframework/security/concurrent/SessionRegistryImpl.java b/core/src/main/java/org/springframework/security/concurrent/SessionRegistryImpl.java index b6dfe65592..419ee1b6bb 100644 --- a/core/src/main/java/org/springframework/security/concurrent/SessionRegistryImpl.java +++ b/core/src/main/java/org/springframework/security/concurrent/SessionRegistryImpl.java @@ -161,11 +161,11 @@ public class SessionRegistryImpl implements SessionRegistry, ApplicationListener return; } + if (logger.isDebugEnabled()) { + logger.debug("Removing session " + sessionId + " from principal's set of registered sessions"); + } + synchronized (sessionsUsedByPrincipal) { - if (logger.isDebugEnabled()) { - logger.debug("Removing session " + sessionId + " from principal's set of registered sessions"); - } - sessionsUsedByPrincipal.remove(sessionId); if (sessionsUsedByPrincipal.size() == 0) {