Summary
After reading this chapter, you should be familiar with how Spring Security manages sessions and protects against session fixation attacks. We also know how to use Spring Security’s concurrency control to prevent the same user from being authenticated multiple times.
We explored the utilization of concurrency control to allow a user to terminate sessions associated with their account. Also, we saw how to configure Spring Security’s creation of sessions. We also covered how to use Spring Security’s DebugFilter filter to troubleshoot issues related to Spring.
We also learned about security, including determining when a HttpSession method was created and the cause of it.
This concludes our discussion about Spring Security’s session management. In the next chapter, we will discuss some specifics about integrating Spring Security with other frameworks.
