This commit is contained in:
Anthony Stirling 2024-11-29 10:40:10 +00:00
parent e588d8f99e
commit 5976e69f54
2 changed files with 6 additions and 5 deletions

View File

@ -150,10 +150,11 @@ public class SecurityConfiguration {
http.sessionManagement(
sessionManagement ->
sessionManagement
.sessionCreationPolicy(SessionCreationPolicy.IF_REQUIRED)
.sessionCreationPolicy(SessionCreationPolicy.ALWAYS)
.sessionAuthenticationStrategy(
new RegisterSessionAuthenticationStrategy(
sessionRegistry)) // ?
.sessionFixation().changeSessionId()
.maximumSessions(10)
.maxSessionsPreventsLogin(false)
.sessionRegistry(sessionRegistry)

View File

@ -3,11 +3,11 @@ multipart.enabled=true
logging.level.org.springframework=WARN
logging.level.org.hibernate=WARN
logging.level.org.eclipse.jetty=WARN
#logging.level.org.springframework.security.saml2=TRACE
logging.level.org.springframework.security.saml2=TRACE
#logging.level.org.springframework.security=DEBUG
#logging.level.org.opensaml: DEBUG
logging.level.org.opensaml: DEBUG
logging.level.com.zaxxer.hikari=WARN
logging.level.stirling.software.SPDF.config.security: DEBUG
spring.jpa.open-in-view=false
server.forward-headers-strategy=NATIVE
@ -30,7 +30,7 @@ server.servlet.context-path=${SYSTEM_ROOTURIPATH:/}
spring.devtools.restart.enabled=true
spring.devtools.livereload.enabled=true
spring.devtools.restart.exclude=stirling/software/SPDF/config/security/saml2/**
spring.devtools.restart.exclude=stirling.software.SPDF.config.security/**
spring.thymeleaf.encoding=UTF-8