Examples of org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy

Package org.springframework.security.web.authentication.session

Examples of org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy

org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy
Uses {@link HttpServletRequest#changeSessionId()} to protect against sessionfixation attacks. This is the default implementation for Servlet 3.1+. @author Rob Winch @since 3.2

     * Creates the default {@link SessionAuthenticationStrategy} for session fixation
     * @return the default {@link SessionAuthenticationStrategy} for session fixation
     */
    private static SessionAuthenticationStrategy createDefaultSessionFixationProtectionStrategy() {
        try {
            return new ChangeSessionIdAuthenticationStrategy();
        } catch(IllegalStateException e) {
            return new SessionFixationProtectionStrategy();
        }
    }

View Full Code Here

         *         customizations
         * @throws IllegalStateException if the container is not Servlet 3.1 or
         *         newer.
         */
        public SessionManagementConfigurer<H> changeSessionId() {
            setSessionFixationAuthenticationStrategy(new ChangeSessionIdAuthenticationStrategy());
            return SessionManagementConfigurer.this;
        }

View Full Code Here

TOP

Related Classes of org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy

org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurer

org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurer$SessionFixationConfigurer

java.lang.reflect.Method

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.