sessionManagement add reference

Real-Dev-Squad · Feb 18, 2024 · cc6158c · cc6158c
1 parent 2d43113
commit cc6158c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/skill-tree/src/main/java/com/RDS/skilltree/Config/SecurityConfig.java b/skill-tree/src/main/java/com/RDS/skilltree/Config/SecurityConfig.java
@@ -32,7 +32,9 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                 .authorizeHttpRequests(auth->auth
                         .requestMatchers("/**").authenticated())
                 .exceptionHandling(ex->ex.authenticationEntryPoint(authEntryPoint))
-                .sessionManagement(session -> session.maximumSessions(1));
+                .sessionManagement(session -> session.maximumSessions(1).maxSessionsPreventsLogin(true)
+                );
+//        https://docs.spring.io/spring-security/reference/servlet/authentication/session-management.html#ns-concurrent-sessions
 
         http.addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
         return http.build();