Java, Spring Security : Disable 2 logins from single browser when authenticated from backend -


i working on spring-mvc application in using spring-security authentication , authorization. in 1 of features, sending invitation users join application. when user clicks on email link, login user backend.

if there user logged in, session old user not removed. have set in xml create newsession, not helping either. result have 2 users logged in same browser. ideas, thank you.

security-application-context.xml code :

 <security:http pattern="/resources/**" security="none"/>     <security:http create-session="ifrequired" use-expressions="true" auto-config="false" disable-url-rewriting="true">         <security:form-login login-page="/login" username-parameter="j_username" password-parameter="j_password"                              login-processing-url="/j_spring_security_check" default-target-url="/canvaslisting"                              always-use-default-target="false" authentication-failure-url="/login?error=auth"/>         <security:remember-me key="_spring_security_remember_me" user-service-ref="userdetailsservice"                               token-validity-seconds="1209600" data-source-ref="datasource"/>         <security:logout delete-cookies="jsessionid" invalidate-session="true" logout-url="/j_spring_security_logout"/>         <security:intercept-url pattern="/**" requires-channel="https"/>         <security:port-mappings>             <security:port-mapping http="80" https="443"/>         </security:port-mappings>         <security:logout logout-url="/logout" logout-success-url="/" success-handler-ref="mylogouthandler"/>         <security:session-management session-fixation-protection="migratesession">             <security:concurrency-control session-registry-ref="sessionreg" max-sessions="5" expired-url="/login"/>         </security:session-management>     </security:http>      <beans:bean id="sessionreg" class="org.springframework.security.core.session.sessionregistryimpl"/>

controller code :

@requestmapping(value = "/activatemembership/{token}")     public string activatemembershipforexistinguser(){ boolean val = this.groupmembersservice.activatemembers(token,true);  }

service layer code :

// logout true when clicked email.     @override     public boolean activatemembers(string token, boolean logout) {         try {             string[] parts = token.split(token_separator);             string username = parts[0].tolowercase();             long groupaccountid = long.valueof(parts[2]);             groupaccount groupaccount = this.groupaccountservice.getgroupobjectonlybyid(groupaccountid);             person person = this.personservice.findpersonbyusername(username);             if(logout) {                 person loggedinuser = this.personservice.getcurrentlyauthenticateduser();                 if (!(loggedinuser == null)) {                     loggedinuser.setonlinestatus(null);                     this.personservice.directpersonupdate(loggedinuser);                     securitycontextholder.getcontext().setauthentication(null);                  }             } //other service layer code   if(logout) {                     collection<grantedauthority> authorities = new arraylist<>();                     authorities.add(new simplegrantedauthority("role_user"));                     authentication authentication = new usernamepasswordauthenticationtoken(person, null, authorities);                     securitycontextholder.getcontext().setauthentication(authentication);                 } }

any ideas? thank you.


Comments

Post a Comment

Popular posts from this blog

minify - Minimizing css files -

i want know how css files can minimized. currently, using external sites css minifier compress css files. however, after removing whitespaces, comments, etc, file sizes reduced 10-15%. how frameworks bootstrap manage make minimized versions kilobytes. as example, css is: body { background-color: #ff0; } the reduction goes 28 bytes 22 bytes other css files have lot more characters still smaller this. actually minifying code means it's remove thing code white space characters new line characters comments block delimiters it reduces amount of code has transferred on web , speed site load fastly.but unreadable format.
Read more

neo4j - finding mutual friends in a cypher statement starting with three or more persons -

Image
i trying build cypher statement neo4j know 2-n starting nodes name , need find node (if any) can reached of starting nodes. at first tought similar "mutual friend" situation handled (start1)-[*..2]->(main)<-[*..2]-(start2) in case have more 2 starting points around 6 know name. so puzzled how can include third, fourth , on node cypher able find commmon root amongst them. in above example neo4j website need path starting 'dilshad', 'becky' , 'cesar' check if have common friend (anders) excluding 'filipa' , 'emil' not friends of three. so far create statement programmatically looks like match (start1 {name:'person1'}), (start2 {name:'person2'}), (start3 {name: 'person3'}), (main) (start1)-[*..2]->(main) , (start2)-[*..2]->(main) , (start3)-[*..2]->(main) return distinct main but wondering if there more elegant / efficient way in cypher possibly use list of names parameter ...
Read more

php - How to remove letter in front of the word laravel -

Image
based on picture above result of var_dump() , dd() of same variable ,when var_dump() , apostrophe (') symbol in black diamond of question mark , when dd() same variable , apostrophe can seen letter 'b' appear in front of words what want can me result : loreal's sdn bhd and @ same time want remove special character ( excluding these 4 symbols (-) ,(_) ,('),(,) ) simply escape special character resolve issue. mysqli_real_escape_string resolve issue. $name = mysqli_real_escape_string($request()->user); or use addslashes function() $name = addslashes($request()->user);
Read more