Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-1379: Added creation of a session if session timeout is detected (requested session ID is invalid).

Browse Source 
This prevents problems with repeated detection of the same invalid session when the redirected request comes in.
This commit is contained in:
Luke Taylor
2010-01-23 00:10:32 +00:00
parent d931495c8a
commit 0974e21fb6
3 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
View File

@@ -33,7 +33,7 @@
<x509 />
-->
<!-- Uncomment to limit the number of sessions a user can have -->
<session-management invalid-session-url="/something">
<session-management invalid-session-url="/timeout.jsp">
<concurrency-control max-sessions="1" error-if-maximum-exceeded="true" />
</session-management>