spring security - SpringSecurity replaying a login Grails -
In my Grails, I have configured it for Spring Security. Logging and changing the value of session token after logout Although the best practice for me, I was wondering whether the login should be done if the login is run again.
For example, someone logs in, receives a valid session token (HTTP jsation). They then run the login again, should they get a new token or not?
I think documents about addressing this potential issue Unless you have any technical reason to enable this feature, the best practice is to do this.
Comments
Post a Comment