November 2017
Intermediate to advanced
542 pages
14h 24m
English
ConcurrentSessionControlStrategy was replaced with ConcurrentSessionControlAuthenticationStrategy. Previously, ConcurrentSessionControlStrategy could not be decoupled from SessionFixationProtectionStrategy. Now it is completely decoupled. For example:
ConcurrentSessionControlStrategy strategy = new ConcurrentSessionControlStrategy(sessionRegistry);
This can be replaced with:
List<SessionAuthenticationStrategy> delegates = new ArrayList<SessionAuthenticationStrategy>();delegates.add(new ConcurrentSessionControlAuthenticationStrategy(sessionRegistry));delegates.add(new SessionFixationProtectionStrategy());delegates.add(new RegisterSessionAuthenticationStrategy(sessionRegistry));CompositeSessionAuthenticationStrategy ...
Read now
Unlock full access