spring - How to configurate two user system in springsecurity? -


in web app,i have 2 user system,one administrators,another users.i use multiple httpsecurity configurate security filter chain separately administrators , users. firstly,when login in web app through administrators , users in signle browser @ same time,the latter login userinfo cover former.

this big bug,when try fix it,i learn springsecurity architecture , implementation,springsecurity use session storing securitycontext between requests .thus,when login in web app through administrators , users in signle browser @ same time,the latter login userinfo cover former login userinfo.

by override httpsessionsecuritycontextrepository,i create securitycontextrepository:onesessionmulticontextrepository.i can use decide securitycontext take session or key use storing session current servletpath.

this fix problem above,two user system can login in web app without affecting each other now.but there new problem,when logout one,another logout too!i found springsecurity invalid session when logout,result in problem.

if want fix this,i must forbid sessionfixationprotectionstrategy , never invalid session when logout.i don't want this,because forbid sessionfixationprotectionstrategy , never invalid session when logout reduce security.

how can fix problem?my purpose make administrators , users can login in web app in signle bowser @ same time without affecting each other.

i don't understand why springsecurity don't offer support situation,i think situation familiar.

i dont know code should put here,because long,if need code,tell me.

my english not good. please forgive me.


Comments

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

php - How can i create a user dashboard -

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -