2
0
Эх сурвалжийг харах

Revert "Update max sessions docs"

This reverts commit c86fd99c8fb9098eb2818144d7fb17bfe1ddfb61.
Marcus Hert Da Coregio 1 жил өмнө
parent
commit
f3bcf7ed5d

+ 4 - 9
docs/modules/ROOT/pages/reactive/authentication/concurrent-sessions-control.adoc

@@ -202,13 +202,13 @@ Java::
 [source,java,role="primary"]
 ----
 @Bean
-SecurityWebFilterChain filterChain(ServerHttpSecurity http, DefaultWebSessionManager webSessionManager) {
+SecurityWebFilterChain filterChain(ServerHttpSecurity http) {
     http
         // ...
         .sessionManagement((sessions) -> sessions
             .concurrentSessions((concurrency) -> concurrency
                 .maximumSessions(SessionLimit.of(1))
-                .maximumSessionsExceededHandler(new PreventLoginMaximumSessionsExceededHandler(webSessionManager.getSessionStore()))
+                .maximumSessionsExceededHandler(new PreventLoginMaximumSessionsExceededHandler())
             )
         );
     return http.build();
@@ -225,13 +225,13 @@ Kotlin::
 [source,kotlin,role="secondary"]
 ----
 @Bean
-open fun springSecurity(http: ServerHttpSecurity, webSessionManager: DefaultWebSessionManager): SecurityWebFilterChain {
+open fun springSecurity(http: ServerHttpSecurity): SecurityWebFilterChain {
     return http {
         // ...
         sessionManagement {
             sessionConcurrency {
                 maximumSessions = SessionLimit.of(1)
-                maximumSessionsExceededHandler = PreventLoginMaximumSessionsExceededHandler(webSessionManager.sessionStore)
+                maximumSessionsExceededHandler = PreventLoginMaximumSessionsExceededHandler()
             }
         }
     }
@@ -380,11 +380,6 @@ public class SessionControl {
 ----
 ======
 
-[NOTE]
-====
-If you are not using the `WebSessionStoreReactiveSessionRegistry` as the implementation, and you want the `WebSession` to be invalidated as well, you will need to use the `WebSessionStore` to retrieve and invalidate the `WebSession`.
-====
-
 [[disabling-for-authentication-filters]]
 == Disabling It for Some Authentication Filters