I am using Spring boot 2.5.6 with webflux security and would like to enforce only one session per user.
To implement this with non reactive security,
@Bean
public SessionRegistry sessionRegistry() {
return new SessionRegistryImpl();
}
@Bean
public SessionAuthenticationStrategy sessionAuthenticationStrategy() {
ConcurrentSessionControlAuthenticationStrategy sessionAuthenticationStrategy = new ConcurrentSessionControlAuthenticationStrategy(sessionRegistry());
sessionAuthenticationStrategy.setMaximumSessions(1);
sessionAuthenticationStrategy.setExceptionIfMaximumExceeded(false);
return sessionAuthenticationStrategy;
}
I am not able to find the reactive security equivalent.