Browse Source

Merge branch '6.3.x'

Closes gh-15206
pull/15214/head
Marcus Hert Da Coregio 2 years ago
parent
commit
0cbec13f87
  1. 6
      docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc

6
docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc

@ -188,6 +188,12 @@ open fun reactiveSessionRegistry(): ReactiveSessionRegistry { @@ -188,6 +188,12 @@ open fun reactiveSessionRegistry(): ReactiveSessionRegistry {
When the maximum number of sessions is exceeded, by default, the least recently used session(s) will be expired.
If you want to change that behavior, you can <<concurrent-sessions-control-custom-strategy,customize the strategy used when the maximum number of sessions is exceeded>>.
[IMPORTANT]
====
The Concurrent Session Management is not aware if there is another session in some Identity Provider that you might use via xref:reactive/oauth2/login/index.adoc[OAuth 2 Login] for example.
If you also need to invalidate the session against the Identity Provider you must <<concurrent-sessions-control-custom-strategy,include your own implementation of `ServerMaximumSessionsExceededHandler`>>.
====
[[concurrent-sessions-control-custom-strategy]]
== Handling Maximum Number of Sessions Exceeded

Loading…
Cancel
Save