Spring会话管理SessionDestroyedEvent没有抛出

时间:2015-04-02 07:44:12

标签: java spring session spring-security session-management

我有一个自定义的RegisterSessionAuthenticationStrategy和我正在使用CompositeSessionAuthenticationStrategyexceptionIfMaximumExceeded = false

我有以下情况:

  • 登录浏览器#1
  • 登录浏览器#2

我希望第一个会话将被销毁,但它们都会保持活跃状态​​。 我到达SessionRegistry.registerNewSession会话#1已设置已过期,但我从未获得SessionDestroyedEvent

的security.xml

<security:session-management
            session-authentication-strategy-ref="sas" />

    </security:http>


    <bean id="sas"
        class="org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy">
        <constructor-arg>
            <list>
                <bean
                    class="org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy">
                    <constructor-arg ref="clusteredSessionRegistryImpl" />
                    <property name="maximumSessions" value="1" />
                    <property name="exceptionIfMaximumExceeded" value="false" />
                </bean>
                <bean
                    class="org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy">
                    <constructor-arg ref="clusteredSessionRegistryImpl" />
                </bean>
            </list>
        </constructor-arg>
    </bean>

0 个答案:

没有答案