spring security - SpringSecurity replaying a login Grails -


In my Grails, I have configured it for Spring Security. Logging and changing the value of session token after logout Although the best practice for me, I was wondering whether the login should be done if the login is run again.

For example, someone logs in, receives a valid session token (HTTP jsation). They then run the login again, should they get a new token or not?

I think documents about addressing this potential issue Unless you have any technical reason to enable this feature, the best practice is to do this.

Comments

Popular posts from this blog

java - ImportError: No module named py4j.java_gateway -

python - Receiving "KeyError" after decoding json result from url -

c++ - Qt::make_shared for creating QSharedPtr as std::make_shared for creating std::shared_ptr -