Spring Security - Third Edition

Preventing authentication instead of forcing logout

Spring Security can also prevent a user from being able to log in to the application if the user already has a session. This means that instead of forcing the original user to be logged out, Spring Security will prevent the second user from being able to log in. The configuration changes can be seen as follows:

    //src/main/java/com/packtpub/springsecurity/configuration/SecurityConfig.java    http.sessionManagement()    .maximumSessions(1)    .expiredUrl("/login/form?expired")     .maxSessionsPreventsLogin(true);

Make the updates and log in to the calendar application with Google Chrome. Now, attempt to log in to the calendar application with Firefox using the same user. You should see our custom error ...