public final class

SimpleRedirectInvalidSessionStrategy

extends Object
implements InvalidSessionStrategy
java.lang.Object
   ↳ org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy

Class Overview

Performs a redirect to a fixed URL when an invalid requested session is detected by the SessionManagementFilter.

Summary

Public Constructors
SimpleRedirectInvalidSessionStrategy(String invalidSessionUrl)
Public Methods
void onInvalidSessionDetected(HttpServletRequest request, HttpServletResponse response)
void setCreateNewSession(boolean createNewSession)
Determines whether a new session should be created before redirecting (to avoid possible looping issues where the same session ID is sent with the redirected request).
[Expand]
Inherited Methods
From class java.lang.Object
From interface org.springframework.security.web.session.InvalidSessionStrategy

Public Constructors

public SimpleRedirectInvalidSessionStrategy (String invalidSessionUrl)

Public Methods

public void onInvalidSessionDetected (HttpServletRequest request, HttpServletResponse response)

Throws
IOException

public void setCreateNewSession (boolean createNewSession)

Determines whether a new session should be created before redirecting (to avoid possible looping issues where the same session ID is sent with the redirected request). Alternatively, ensure that the configured URL does not pass through the SessionManagementFilter.

Parameters
createNewSession defaults to true.