Reputation: 6059
Can i manage the complete HTTPSession lifecycle (Creation, Update, Destroy and Expiry) only with Spring Session and without using Spring Security ?
Reason i got this question is that, Spring Security states that it provides 'Session Auto-Expiry' & 'Concurrent Session' features. Wouldn't 'Session Auto-Expiry' be available in 'Spring Session' itself ?
Upvotes: 2
Views: 1727
Reputation: 29119
I believe so. The Multiple Users sample demonstrates login/logout without using Spring Security.
In this case Session auto expiry is provided by the Redis backend.
Upvotes: 1