Skip to content

Commit 95fdc8f

Browse files
committed
Remove session management configuration
Deleted the session management block that limited maximum sessions to one in TurSecurityConfigProduction. This change may allow multiple concurrent sessions per user.
1 parent 912684a commit 95fdc8f

File tree

1 file changed

+0
-2
lines changed

1 file changed

+0
-2
lines changed

turing-app/src/main/java/com/viglet/turing/spring/security/TurSecurityConfigProduction.java

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -91,8 +91,6 @@ SecurityFilterChain filterChain(HttpSecurity http,
9191
mvc.matcher("/api/v2/guest/**"),
9292
mvc.matcher("/h2/**")))
9393
.addFilterAfter(new TurCsrfCookieFilter(), BasicAuthenticationFilter.class);
94-
http.sessionManagement(sess -> sess
95-
.maximumSessions(1));
9694
if (turConfigProperties.isKeycloak()) {
9795
String keycloakUrlFormat =
9896
String.format("%s/protocol/openid-connect/logout?client_id=%s&post_logout_redirect_uri=%s",

0 commit comments

Comments
 (0)