After updating Spring Security from 3.2.5 to 5.5.7 we are getting session timeout issue. If we go with 3.2.5 it is working. I tried multiple ways but couldn't able to figured out issue.
<security:session-management invalid-session-url="/login-fail?error-timeout" session-fixation-protection="migrateSession">
<security:concurrency-control max-sessions="50" error-if-maximum-exceeded="false" expired-url="/login-fail?error-timeout" />
</security:session-management>
It is redirecting to invalid-session-url.
when i try to login firsttime it is saying session is timeout and if i try to login second time it is redirecting to the j_spring_security_check page.