java - How to ensure the same account is not used to log in two different people at the same time in Spring Security? -
i have spring mvc app not protect updates of user data transactions.
it assumes single user accessing account data account @ 1 time.
however, if 2 users log in using same authentication credentials, theoretically possible, although unlikely, 2 database updates on same user data overlap , conflict.
is there simple way protect against in spring security?
spring security supports protection against concurrent logins. see 2.3.3 session management instructions of how enable it.
Comments
Post a Comment