浏览代码

Merge branch '6.3.x'

Closes gh-15206
Marcus Hert Da Coregio 1 年之前
父节点
当前提交
0cbec13f87
共有 1 个文件被更改,包括 6 次插入0 次删除
  1. 6 0
      docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc

+ 6 - 0
docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc

@@ -188,6 +188,12 @@ open fun reactiveSessionRegistry(): ReactiveSessionRegistry {
 When the maximum number of sessions is exceeded, by default, the least recently used session(s) will be expired.
 When the maximum number of sessions is exceeded, by default, the least recently used session(s) will be expired.
 If you want to change that behavior, you can <<concurrent-sessions-control-custom-strategy,customize the strategy used when the maximum number of sessions is exceeded>>.
 If you want to change that behavior, you can <<concurrent-sessions-control-custom-strategy,customize the strategy used when the maximum number of sessions is exceeded>>.
 
 
+[IMPORTANT]
+====
+The Concurrent Session Management is not aware if there is another session in some Identity Provider that you might use via xref:reactive/oauth2/login/index.adoc[OAuth 2 Login] for example.
+If you also need to invalidate the session against the Identity Provider you must <<concurrent-sessions-control-custom-strategy,include your own implementation of `ServerMaximumSessionsExceededHandler`>>.
+====
+
 [[concurrent-sessions-control-custom-strategy]]
 [[concurrent-sessions-control-custom-strategy]]
 == Handling Maximum Number of Sessions Exceeded
 == Handling Maximum Number of Sessions Exceeded