-- <security:session-management invalid-session-url="/loginRedirect.jtl"> <security:concurrency-control error-if-maximum-exceeded="false" max-sessions="1" expired-url="/loginRedirect.jtl"/> </security:session-management SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITYCONTEXTFILTER SecurityContextPersistenceFilter http CONCURRENTSESSIONFILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSIONMANAGEMENTFILTER SessionManagementFilter session-management
intercept-url pattern="/admin/**" access="hasRole('ROLE_ADMIN')" requires-channel="https"/> <session-management --<concurrency-control max-sessions="1" error-if-maximum-exceeded="true"/>--> </session-management intercept-url pattern="/member/**" access="hasRole('ROLE_MEMBER')" requires-channel="http"/> <session-management --<concurrency-control max-sessions="1" error-if-maximum-exceeded="true"/>--> </session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
--> <security:session-management> <security:concurrency-control error-if-maximum-exceeded ="true" max-sessions="1" /> </security:session-management> </security:http> 接下来是一个比较不错的功能:是否允许同一用户多处登陆 Java代码 <security:session-management> <security:concurrency-control error-if-maximum-exceeded="true" max-sessions="1" /> </security:session-management> exception-if-maximum-exceeded
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
delete-cookies="JSESSIONID"/> <security:remember-me key="fast-contacts"/> <security:session-management invalid-session-url="/invalidSession.html"></security:session-management> </security:http>
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management
perform_logout" delete-cookies="JSESSIONID" success-handler-ref="customLogoutSuccessHandler"/> <session-management
-- 单用户登陆 --> <session-management> <concurrency-control max-sessions="1" error-if-maximum-exceeded="true" /> </session-management> <! -- 检測失效的sessionId,session超时时,定位到另外一个URL --> <session-management invalid-session-url="/sessionTimeOut.jsp
SECURITY_CONTEXT_FILTER SecurityContextPersistenceFilter http CONCURRENT_SESSION_FILTER ConcurrentSessionFilter session-management ANONYMOUS_FILTER AnonymousAuthenticationFilter http/anonymous SESSION_MANAGEMENT_FILTER SessionManagementFilter session-management